36a96d7f32
This is a port of 31a6449734 ("Add capability for snapshotters to
declare support for UID remapping") to sbserver.
This patch remaps the rootfs in the platform-specific if user namespaces
are in use, so the pod can read/write to the rootfs.
Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
52 lines
1.6 KiB
Go
52 lines
1.6 KiB
Go
/*
|
|
Copyright The containerd Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package sbserver
|
|
|
|
import (
|
|
"fmt"
|
|
|
|
imagespec "github.com/opencontainers/image-spec/specs-go/v1"
|
|
runtime "k8s.io/cri-api/pkg/apis/runtime/v1"
|
|
|
|
"github.com/containerd/containerd/oci"
|
|
"github.com/containerd/containerd/snapshots"
|
|
)
|
|
|
|
// No extra spec options needed for windows.
|
|
func (c *criService) containerSpecOpts(config *runtime.ContainerConfig, imageConfig *imagespec.ImageConfig) ([]oci.SpecOpts, error) {
|
|
return nil, nil
|
|
}
|
|
|
|
// snapshotterOpts returns any Windows specific snapshotter options for the r/w layer
|
|
func snapshotterOpts(snapshotterName string, config *runtime.ContainerConfig) ([]snapshots.Opt, error) {
|
|
var opts []snapshots.Opt
|
|
|
|
switch snapshotterName {
|
|
case "windows":
|
|
rootfsSize := config.GetWindows().GetResources().GetRootfsSizeInBytes()
|
|
if rootfsSize != 0 {
|
|
sizeStr := fmt.Sprintf("%d", rootfsSize)
|
|
labels := map[string]string{
|
|
"containerd.io/snapshot/windows/rootfs.sizebytes": sizeStr,
|
|
}
|
|
opts = append(opts, snapshots.WithLabels(labels))
|
|
}
|
|
}
|
|
|
|
return opts, nil
|
|
}
|