github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
a8ef1fc488
containerd/contrib
History
Akihiro Suda aefabe5462
Dockerfile.test: add "cri-in-userns" (aka rootless) test stage 
The `cri-in-userns` stage is for testing "CRI-in-UserNS", which should be used in conjunction with "Kubelet-in-UserNS":
https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2033-kubelet-in-userns-aka-rootless

This feature is mostly expected to be used for `kind` and `minikube`.

Requires Rootless Docker/Podman/nerdctl with cgroup v2 delegation: https://rootlesscontaine.rs/getting-started/common/cgroup2/
(Rootless Docker/Podman/nerdctl prepares the UserNS, so we do not need to create UserNS by ourselves)

Usage:
```
podman build --target cri-in-userns -t cri-in-userns -f contrib/Dockerfile.test .
podman run -it --rm --privileged cri-in-userns
```

The stage is tested on CI with Rootless Podman on Fedora 34 on Vagrant.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-07-09 14:50:04 +09:00
..
ansible upgrade pause image to 3.5 for non-root 2021-03-16 23:20:35 +08:00
apparmor Fix exported comments enforcer in CI 2021-03-12 08:47:05 -08:00
autocomplete Fix zsh autocomplete script 2020-02-11 19:56:27 +08:00
aws Move snapshotters benchmark to a separate package 2019-04-02 14:42:21 -07:00
Dockerfile.test.d/cri-in-userns Dockerfile.test: add "cri-in-userns" (aka rootless) test stage 2021-07-09 14:50:04 +09:00
fuzz Move documentation and helper directories out of root 2021-01-12 12:19:50 -08:00
gce fix names and paths for containerd master 2021-03-03 21:27:28 -05:00
linuxkit update linuxkit readme 2021-03-01 12:00:56 +08:00
nvidia Allow to pass --no-cgroup option to nvidia-container-cli 2021-06-14 23:58:22 +09:00
seccomp profiles: seccomp: update to Linux 5.11 syscall list 2021-01-21 21:30:25 +01:00
snapshotservice Add Cleanup to snapshot API 2020-01-07 14:59:20 -08:00
Dockerfile.test Dockerfile.test: add "cri-in-userns" (aka rootless) test stage 2021-07-09 14:50:04 +09:00
README.md Add readme to contib 2017-09-18 11:47:27 -04:00

README.md

contrib

The contrib directory contains packages that do not belong in the core containerd packages but still contribute to overall containerd usability.

Package such as Apparmor or Selinux are placed in contrib because they are platform dependent and often require higher level tools and profiles to work.

Packaging and other built tools can be added to contrib to aid in packaging containerd for various distributions.

Testing

Code in the contrib directory may or may not have been tested in the normal test pipeline for core components.