github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
Files
71740399e05bbaf64616f10f67573d91ff3e7f28
containerd/pkg/server
History
Akihiro Suda 71740399e0 cgroup2: unshare cgroup namespace for containers 
In cgroup v1 container implementations, cgroupns is not used by default because
it was not available in the kernel until kernel 4.6 (May 2016), and the default
behavior will not change on cgroup v1 environments, because changing the
default will break compatibility and surprise users.

For cgroup v2, implementations are going to unshare cgroupns by default
so as to hide /sys/fs/cgroup from containers.

* Discussion: https://github.com/containers/libpod/issues/4363
* Podman PR (merged): https://github.com/containers/libpod/pull/4374
* Moby PR: https://github.com/moby/moby/pull/40174

This PR enables cgroupns for containers, but pod sandboxes are untouched
because probably there is no need to do.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-01-09 14:58:30 +09:00
..
io
Add windows implmenetation
2019-09-18 10:46:29 -07:00
testing
Update cni and go-cni to the v0.7.1 release
2019-08-14 16:19:37 +00:00
container_attach.go
Switch to containerd/log package
2019-08-07 12:18:18 -07:00
container_create_test.go
Add windows implmenetation
2019-09-18 10:46:29 -07:00
container_create_unix_test.go
Add back default UNIX env to container config
2019-09-19 09:00:25 -04:00
container_create_unix.go
cgroup2: unshare cgroup namespace for containers
2020-01-09 14:58:30 +09:00
container_create_windows_test.go
Cleanup path for windows mount
2019-11-15 18:52:11 +00:00
container_create_windows.go
Forward SandboxConfig.Hostname to Workload container activation
2019-09-24 10:21:17 -07:00
container_create.go
Add windows implmenetation
2019-09-18 10:46:29 -07:00
container_exec.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
container_execsync.go
Add windows portforward support
2019-09-23 17:36:43 -07:00
container_list_test.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
container_list.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
container_log_reopen.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
container_remove_test.go
Use wait instead of TaskExit.
2019-04-18 00:18:26 -07:00
container_remove.go
Switch to containerd/log package
2019-08-07 12:18:18 -07:00
container_start_test.go
Use wait instead of TaskExit.
2019-04-18 00:18:26 -07:00
container_start.go
Open/create log file with FILE_SHARE_DELETE on windows
2019-09-18 10:46:28 -07:00
container_stats_list_unix_test.go
Update code for latest containerd.
2019-10-09 18:05:20 -07:00
container_stats_list_unix.go
Use typealias for containerd metrics
2019-09-20 16:01:48 -04:00
container_stats_list_windows.go
Add container compute stats support.
2019-10-25 14:32:02 -07:00
container_stats_list.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
container_stats.go
Add windows implmenetation
2019-09-18 10:46:29 -07:00
container_status_test.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
container_status.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
container_stop_test.go
StopContainer should block unless client context is canceled
2019-07-16 09:44:23 -07:00
container_stop.go
Switch to containerd/log package
2019-08-07 12:18:18 -07:00
container_update_resources_unix_test.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
container_update_resources_unix.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
container_update_resources_windows.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
events_test.go
Use wait instead of TaskExit.
2019-04-18 00:18:26 -07:00
events.go
Better handle unknown state.
2019-12-06 10:56:27 -08:00
helpers_selinux_test.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
helpers_test.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
helpers_unix_test.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
helpers_unix.go
Open/create log file with FILE_SHARE_DELETE on windows
2019-09-18 10:46:28 -07:00
helpers_windows.go
Open/create log file with FILE_SHARE_DELETE on windows
2019-09-18 10:46:28 -07:00
helpers.go
Better handle unknown state.
2019-12-06 10:56:27 -08:00
image_list_test.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
image_list.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
image_pull_test.go
Use http for localhost, 127.0.0.1 and ::1 by default.
2019-10-28 19:07:43 -07:00
image_pull.go
Add insecure_skip_verify option.
2019-11-26 13:25:52 -08:00
image_remove.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
image_status_test.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
image_status.go
Switch to containerd/log package
2019-08-07 12:18:18 -07:00
imagefs_info_test.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
imagefs_info.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
instrumented_service.go
Switch to containerd/log package
2019-08-07 12:18:18 -07:00
restart.go
Better handle unknown state.
2019-12-06 10:56:27 -08:00
sandbox_list_test.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
sandbox_list.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00
sandbox_portforward_unix.go
Add windows portforward support
2019-09-23 17:36:43 -07:00
sandbox_portforward_windows.go
Add windows portforward support
2019-09-23 17:36:43 -07:00
sandbox_portforward.go
Add windows portforward support
2019-09-23 17:36:43 -07:00
sandbox_remove.go
Switch to containerd/log package
2019-08-07 12:18:18 -07:00
sandbox_run_test.go
Report Additional POD IPs
2019-09-18 17:21:37 -07:00
sandbox_run_unix_test.go
Add windows implmenetation
2019-09-18 10:46:29 -07:00
sandbox_run_unix.go
bump up the default runtime to "io.containerd.runc.v2"
2019-12-16 11:53:58 +09:00
sandbox_run_windows_test.go
Set default sandbox container cpu shares on windows.
2019-09-24 17:03:11 -07:00
sandbox_run_windows.go
Set default sandbox container cpu shares on windows.
2019-09-24 17:03:11 -07:00
sandbox_run.go
Address comment.
2019-09-19 14:05:28 -07:00
sandbox_status_test.go
Report Additional POD IPs
2019-09-18 17:21:37 -07:00
sandbox_status.go
Report Additional POD IPs
2019-09-18 17:21:37 -07:00
sandbox_stop_test.go
RunPodSandbox should block unless client context is canceled
2019-07-16 09:35:56 -07:00
sandbox_stop.go
Address comment.
2019-09-19 14:05:28 -07:00
service_test.go
Create image reference cache.
2018-09-10 11:30:52 -07:00
service_unix.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
service_windows.go
Add windows implmenetation
2019-09-18 10:46:29 -07:00
service.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
snapshots.go
Use github.com/pkg/errors
2018-03-17 02:24:38 +00:00
status.go
Move unix specific logic into _unix.go
2019-09-03 16:23:42 -07:00
streaming_test.go
streaming: tls conf validation to func with tests
2018-08-30 15:10:48 +02:00
streaming.go
Add windows portforward support
2019-09-23 17:36:43 -07:00
update_runtime_config_test.go
Report Additional POD IPs
2019-09-18 17:21:37 -07:00
update_runtime_config.go
Report Additional POD IPs
2019-09-18 17:21:37 -07:00
version.go
Update kubernetes dependency to 1.15.0.
2019-07-31 23:52:03 -07:00