github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
1,444 Commits 3 Branches 2 Tags 112 MiB
effd82227c
Commit Graph

1444 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Lantao Liu
4a65865eaa Update kubernetes to 6b7c39a4f8d4c38e8724550cc3e6e41b7ac7a276 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-04 23:47:39 -07:00
Lantao Liu
063f8158f8 Sort volume mount. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-09-04 22:43:37 -07:00
Tim Allclair
89b5b3cc40
Vendor latest CRI API 
Signed-off-by: Tim Allclair <tallclair@google.com>
 2018-09-04 20:05:11 -07:00
Lantao Liu
49877571e9
Merge pull request #886 from DataDog/JulienBalestra/tls-stream 
stream: can use user certificates
 2018-09-03 23:35:18 -07:00
JulienBalestra
dffd0dfa0e
streaming: tls conf validation to func with tests 
Signed-off-by: JulienBalestra <julien.balestra@datadoghq.com>
 2018-08-30 15:10:48 +02:00
Lantao Liu
9acd95319a
Merge pull request #890 from Random-Liu/update-go-cni 
Update go-cni to 6d7b509a054a3cb1c35ed1865d4fde2f0cb547cd.
 2018-08-29 17:27:31 -07:00
Lantao Liu
3da8bedb65 Update go-cni to 6d7b509a054a3cb1c35ed1865d4fde2f0cb547cd. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-29 11:17:02 -07:00
JulienBalestra
859003a940
stream: struct for x509 key pair, update the docs, error management 
Signed-off-by: JulienBalestra <julien.balestra@datadoghq.com>
 2018-08-28 17:22:11 +02:00
JulienBalestra
b82b524260
stream: can use user certificates 
Signed-off-by: JulienBalestra <julien.balestra@datadoghq.com>
 2018-08-27 19:26:14 +02:00
Lantao Liu
df67dfff19
Merge pull request #885 from Random-Liu/enhance-container-stop 
Fix an issue that container/sandbox can't be stopped.
 2018-08-27 10:26:11 -07:00
Lantao Liu
bca304ff3e Fix an issue that container/sandbox can't be stopped. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-24 18:54:08 -07:00
Lantao Liu
a3af7393fe
Merge pull request #880 from thaJeztah/align_dependencies_to_tags 
Use tagged versions for dependencies where possible
 2018-08-22 10:36:35 -07:00
Sebastiaan van Stijn
1d7f5f43b2
Use tagged versions for dependencies where possible 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2018-08-22 15:31:25 +02:00
Lantao Liu
58eb04550d
Merge pull request #873 from miaoyq/verify-selinux-level 
Verify selinux level format
 2018-08-13 18:57:01 -07:00
Yanqiang Miao
a87bda08c0 update selinux to b6fa367 
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
 2018-08-14 08:33:43 +08:00
Yanqiang Miao
415727cd9f verify selinux level format 
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
 2018-08-14 08:33:34 +08:00
Lantao Liu
7d483b2fb0
Merge pull request #874 from Random-Liu/update-containerd 
Update containerd to b9eeaa1ce8.
 2018-08-09 11:00:36 -07:00
Lantao Liu
6379fd0346 Update containerd to b9eeaa1ce8. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-08-09 01:53:44 -07:00
Lantao Liu
c9d6151526
Merge pull request #869 from Random-Liu/support-netd 
Support netd in GCE bootstrap.
 2018-07-31 10:44:53 -07:00
Lantao Liu
d1dcacf9ef Support netd in GCE bootstrap. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-30 23:37:00 -07:00
Lantao Liu
1263024a5a
Merge pull request #864 from Random-Liu/unpack-during-import 
Unpack image during import.
 2018-07-26 10:12:45 -07:00
Lantao Liu
e1a37e8797 Unpack image during import. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-26 07:48:41 +00:00
Lantao Liu
a0cfc8c1d2
Merge pull request #857 from egernst/untrusted-priv 
sandbox: separate host accessing workload and privileged
 2018-07-24 12:11:41 -07:00
Eric Ernst
9a01272dc2 sandbox: separate host accessing workload and privileged 
VM isolated runtimes can support privileged workloads. In this
scenario, access to the guest VM is provided instead of the host.
Based on this, allow untrusted runtimes to run privileged workloads.

If the workload is specifically asking for node PID/IPC/network, etc.,
then continue to require the trusted runtime.

This commit repurposes the hostPrivilegedSandbox utility function to
only check for node namespace checking.

Fixes: #855

Signed-off-by: Eric Ernst <eric.ernst@intel.com>
 2018-07-22 16:51:22 -07:00
Lantao Liu
2be13a8a30
Merge pull request #858 from Random-Liu/stream-serve-on-local 
Serve streaming on localhost by default to match k8s 1.11 default.
 2018-07-20 19:12:53 -07:00
Lantao Liu
b3d6f16383 Serve streaming on localhost by default to match k8s 1.11 default. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-21 01:10:45 +00:00
Lantao Liu
42a98de252
Merge pull request #851 from yanxuean/support-no-pivot 
support no_pivot option for runc
 2018-07-19 20:31:38 -07:00
yanxuean
7065dd81f9 support no_pivot option for runc 
Signed-off-by: yanxuean <yan.xuean@zte.com.cn>
 2018-07-20 08:46:50 +08:00
Lantao Liu
7beac6fcc1
Merge pull request #849 from dmcgowan/remove-stringid 
Replace stringid call with simple random reader
 2018-07-12 18:32:28 -07:00
Derek McGowan
1984e451d5 Replace stringid with simple rand reader 
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
 2018-07-12 16:40:45 -07:00
Lantao Liu
2eb817c7bd
Merge pull request #843 from Random-Liu/document-no-overwrite-dir 
Use `--no-overwrite-dir` in installation doc.
 2018-07-11 11:50:46 -07:00
Lantao Liu
5637e8be40 Set 0022 umask for hack/release.sh. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 18:26:13 +00:00
Lantao Liu
0f3c83b11b Use --no-overwrite-dir in installation doc. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 18:04:48 +00:00
Lantao Liu
1d0d9b3423
Merge pull request #841 from Random-Liu/add-back-missing-vendor 
Add missing vendor back.
 2018-07-11 10:42:38 -07:00
Lantao Liu
fb60d18fad Add missing vendor back. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-11 08:49:47 +00:00
Lantao Liu
ca32566575
Merge pull request #838 from Random-Liu/add-auth-config 
Add auth config
 2018-07-10 23:55:33 -07:00
Lantao Liu
1d9a754f6a Update containerd to b382b6fe0b. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-10 19:03:27 -07:00
Lantao Liu
e4ad68098e Remove pkg/containerd/resolver package. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-09 19:08:48 -07:00
Lantao Liu
952e53bf58 Add registry auth config, and use docker resolver in containerd. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-07-09 19:08:48 -07:00
Lantao Liu
5ad95b2db4
Merge pull request #833 from Random-Liu/update-containerd-k8s 
Update containerd and k8s.
 2018-06-27 17:08:01 -07:00
Lantao Liu
88c5165bfd Update containerd and k8s. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-27 23:08:00 +00:00
Lantao Liu
bc99f7a7e8
Merge pull request #832 from Random-Liu/remove-crictl-on-gce 
Remove crictl on GCE for all cases.
 2018-06-26 18:39:46 -07:00
Lantao Liu
f580374825 Remove crictl on GCE for all cases. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-26 22:37:23 +00:00
Lantao Liu
c68b60514e
Merge pull request #831 from Random-Liu/fix-link 
Fix another link.
 2018-06-26 14:44:39 -07:00
Lantao Liu
fd71c9f065 Fix another link. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-26 13:30:32 -07:00
Lantao Liu
47b8d30bb3
Merge pull request #828 from yujuhong/fix-gce-link 
Fix the link to the GCE getting-started guide
 2018-06-26 13:07:50 -07:00
Lantao Liu
0e42438e7a
Merge pull request #829 from Random-Liu/local-stream-server 
Set stream server to serve on localhost on GCE.
 2018-06-26 11:23:06 -07:00
Lantao Liu
f6ab733f9e Set stream server to serve on localhost on GCE. 
Signed-off-by: Lantao Liu <lantaol@google.com>
 2018-06-26 07:13:00 +00:00
Yu-Ju Hong
e23c0e708a
Fix link to GCE getting started guide 
Signed-off-by: Yu-Ju Hong <yjhong@google.com>
 2018-06-25 12:10:03 -07:00
Lantao Liu
4eb4a29577
Merge pull request #825 from abhi/cni_config 
Change to keep in sync with latest cni config
 2018-06-21 16:14:31 -07:00