containerd/contrib
Akihiro Suda eb5a0c04b4
apparmor: add signal (receive) peer=/usr/local/bin/rootlesskit,
Fix containerd/nerdctl issue 2730
> [Rootless] `nerdctl rm` fails when AppArmor is loaded:
> `error="unknown error after kill: runc did not terminate successfully: exit status 1:
> unable to signal init: permission denied\n: unknown"`

Caused by:
> kernel: audit: type=1400 audit(1713840662.766:122): apparmor="DENIED" operation="signal" class="signal"
> profile="nerdctl-default" pid=366783 comm="runc" requested_mask="receive" denied_mask="receive" signal=kill
> peer="/usr/local/bin/rootlesskit"

The issue is known to happen on Ubuntu 23.10 and 24.04 LTS.
Doesn't seem to happen on Ubuntu 22.04 LTS.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2024-04-23 12:21:26 +09:00
..
ansible upgrade registry.k8s.io/pause version 2023-05-28 07:59:10 +08:00
apparmor apparmor: add signal (receive) peer=/usr/local/bin/rootlesskit, 2024-04-23 12:21:26 +09:00
autocomplete Fix zsh autocomplete script 2020-02-11 19:56:27 +08:00
aws Move snapshotters benchmark to a separate package 2019-04-02 14:42:21 -07:00
diffservice Switch to new errdefs package 2024-01-25 22:18:45 -08:00
Dockerfile.test.d contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages 2023-01-03 20:19:38 +09:00
fuzz update to go1.21.9, go1.22.2 2024-04-22 19:43:32 +02:00
gce Revert "Fix for k8s nfs related tests" 2024-02-10 22:34:30 -05:00
nvidia replace deprecated Prestart to CreateRuntime hook 2024-02-20 21:54:47 +05:30
seccomp Merge pull request #9684 from AkihiroSuda/seccomp-6.7 2024-01-25 19:07:42 +00:00
snapshotservice Switch to new errdefs package 2024-01-25 22:18:45 -08:00
Dockerfile.test update to go1.21.9, go1.22.2 2024-04-22 19:43:32 +02:00
README.md Add readme to contib 2017-09-18 11:47:27 -04:00
v2-migrate.sh Update migration script based on usage 2024-03-18 12:14:44 -07:00

contrib

The contrib directory contains packages that do not belong in the core containerd packages but still contribute to overall containerd usability.

Package such as Apparmor or Selinux are placed in contrib because they are platform dependent and often require higher level tools and profiles to work.

Packaging and other built tools can be added to contrib to aid in packaging containerd for various distributions.

Testing

Code in the contrib directory may or may not have been tested in the normal test pipeline for core components.