github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity
Files
cf07f28ee22a6df79177b55751902b24548105ad
containerd/internal/cri/server
History
Wei Fu cf07f28ee2 *: should align pipe's owner with init process 
The containerd-shim creates pipes and passes them to the init container as
stdin, stdout, and stderr for logging purposes. By default, these pipes are
owned by the root user (UID/GID: 0/0). The init container can access them
directly through inheritance.

However, if the init container attempts to open any files pointing to these
pipes (e.g., /proc/1/fd/2, /dev/stderr), it will encounter a permission issue
since it is not the owner. To avoid this, we need to align the ownership of
the pipes with the init process.

Fixes: #10598

Signed-off-by: Wei Fu <fuweid89@gmail.com>
2024-11-20 18:01:26 +00:00
..
events
Make api a Go sub-module
2024-05-02 11:03:00 -07:00
images
fix: set the credentials even if not provided
2024-11-19 22:36:50 +00:00
podsandbox
Merge pull request #10864 from djdongjin/dedup-cri-util
2024-10-23 20:24:38 +00:00
blockio_linux.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
blockio_stub.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
cni_conf_syncer.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_attach.go
Add spans to CRI runtime service and related client methods
2024-08-05 02:34:20 +00:00
container_checkpoint_linux.go
use format string when using printf like commands
2024-08-14 17:04:53 +05:30
container_checkpoint.go
Wire through CRI ContainerCheckpoint RPC
2024-03-07 17:34:07 +00:00
container_create_linux_test.go
CRI: remove disable_cgroup
2024-08-15 06:08:30 +09:00
container_create_linux.go
KEP-3619: Fine grained SupplementalGroups control
2024-06-12 09:10:40 +09:00
container_create_other_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_create_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_create_test.go
remove uses of platforms.Platform alias
2024-05-28 14:56:30 +02:00
container_create_windows_test.go
KEP-3857: Recursive Read-only (RRO) mounts
2024-02-19 00:42:50 +09:00
container_create_windows.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_create.go
dedup BuildLabels
2024-10-21 13:23:25 -04:00
container_events.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_exec.go
Add spans to CRI runtime service and related client methods
2024-08-05 02:34:20 +00:00
container_execsync_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_execsync.go
Add spans to CRI runtime service and related client methods
2024-08-05 02:34:20 +00:00
container_list_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_list.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_log_reopen.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_remove_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_remove.go
Add spans to CRI runtime service and related client methods
2024-08-05 02:34:20 +00:00
container_start_linux.go
*: should align pipe's owner with init process
2024-11-20 18:01:26 +00:00
container_start_other.go
*: should align pipe's owner with init process
2024-11-20 18:01:26 +00:00
container_start_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_start.go
*: should align pipe's owner with init process
2024-11-20 18:01:26 +00:00
container_stats_list_test.go
Cumulative stats can't decrease
2024-08-28 23:23:30 +00:00
container_stats_list.go
Cumulative stats can't decrease
2024-08-28 23:23:30 +00:00
container_stats.go
cri: get pid count from container metrics
2024-07-01 15:34:47 +00:00
container_status_linux_test.go
KEP-3619: Fine grained SupplementalGroups control
2024-06-12 09:10:40 +09:00
container_status_linux.go
KEP-3619: Fine grained SupplementalGroups control
2024-06-12 09:10:40 +09:00
container_status_other.go
KEP-3619: Fine grained SupplementalGroups control
2024-06-12 09:10:40 +09:00
container_status_test.go
KEP-3619: Fine grained SupplementalGroups control
2024-06-12 09:10:40 +09:00
container_status_windows.go
KEP-3619: Fine grained SupplementalGroups control
2024-06-12 09:10:40 +09:00
container_status.go
KEP-3619: Fine grained SupplementalGroups control
2024-06-12 09:10:40 +09:00
container_stop_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_stop.go
Add spans to CRI runtime service and related client methods
2024-08-05 02:34:20 +00:00
container_update_resources_linux_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_update_resources_linux.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_update_resources_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_update_resources_windows.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
container_update_resources.go
cmd: don't alias context package, and use cliContext for cli.Context
2024-06-20 02:15:13 +02:00
events.go
Update errdefs to 0.3.0
2024-10-18 16:04:54 -07:00
fuzz.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
helpers_linux.go
pkg/seutil: move to internal/cri
2024-03-20 11:11:24 +01:00
helpers_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
helpers_test.go
dedup BuildLabels
2024-10-21 13:23:25 -04:00
helpers_windows_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
helpers_windows.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
helpers.go
dedup BuildLabels
2024-10-21 13:23:25 -04:00
list_metric_descriptors.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
list_pod_sandbox_metrics.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
metrics.go
Wire through CRI ContainerCheckpoint RPC
2024-03-07 17:34:07 +00:00
nri_linux.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
nri_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
nri.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
rdt_stub.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
rdt.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
restart.go
cri: remove sandbox controller from client
2024-10-16 17:37:07 +08:00
runtime_config_linux_test.go
pkg/systemd: move to internal/cri
2024-03-20 11:05:25 +01:00
runtime_config_linux.go
Make api a Go sub-module
2024-05-02 11:03:00 -07:00
runtime_config_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
runtime_config.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_list_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_list.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_portforward_linux.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_portforward_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_portforward_windows.go
Account for ipv4 vs ipv6 localhost
2024-04-19 11:30:49 -07:00
sandbox_portforward.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_remove.go
Add spans to CRI runtime service and related client methods
2024-08-05 02:34:20 +00:00
sandbox_run_linux.go
internal/cri: simplify netns setup with pinned userns
2024-09-11 07:21:43 +08:00
sandbox_run_other.go
internal/cri: simplify netns setup with pinned userns
2024-09-11 07:21:43 +08:00
sandbox_run_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_run_windows.go
internal/cri: simplify netns setup with pinned userns
2024-09-11 07:21:43 +08:00
sandbox_run.go
Handle teardown failure to avoid blocking cleanup
2024-10-15 15:35:20 -07:00
sandbox_service.go
remove uses of platforms.Platform alias
2024-05-28 14:56:30 +02:00
sandbox_stats_linux.go
cri: get pid count from container metrics
2024-07-01 15:34:47 +00:00
sandbox_stats_list.go
cri: optimize ListPodSandboxStats with parallelism
2024-07-12 09:02:33 +00:00
sandbox_stats_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_stats_windows_test.go
Move protobuf package under pkg
2024-05-02 10:52:03 -07:00
sandbox_stats_windows.go
Make api a Go sub-module
2024-05-02 11:03:00 -07:00
sandbox_stats.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_status_test.go
cri/server: Add userns tests in PodSandboxStatus
2024-02-07 17:06:01 +01:00
sandbox_status.go
Merge pull request #10656 from djdongjin/remove-cri-SandboxInfo-RuntimeHandler
2024-10-17 05:23:12 +00:00
sandbox_stop_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
sandbox_stop.go
Add check for CNI plugins before tearing down pod network
2024-09-27 16:12:03 -04:00
service_linux.go
migrate to github.com/moby/sys/userns
2024-08-08 12:48:54 +02:00
service_other.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
service_test.go
sandbox: add update api for controller
2024-06-14 02:31:51 +00:00
service_windows.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
service.go
KEP-3619: implement features.supplemental_groups_policy in RuntimeStatus
2024-07-23 01:01:36 +09:00
status_test.go
Make api a Go sub-module
2024-05-02 11:03:00 -07:00
status.go
KEP-3619: implement features.supplemental_groups_policy in RuntimeStatus
2024-07-23 01:01:36 +09:00
streaming.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
test_config.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
update_runtime_config_test.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
update_runtime_config.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00
version.go
Move CRI from pkg/ to internal/
2024-02-02 10:12:08 -08:00