f3cdfc488e
runc rc95 contains a fix for CVE-2021-30465. runc rc94 provides fixes and improvements. One notable change is cgroup manager's Set now accept Resources rather than Cgroup (see https://github.com/opencontainers/runc/pull/2906). Modify the code accordingly. Also update runc dependencies (as hinted by hack/lint-depdendencies.sh): github.com/cilium/ebpf v0.5.0 github.com/containerd/console v1.0.2 github.com/coreos/go-systemd/v22 v22.3.1 github.com/godbus/dbus/v5 v5.0.4 github.com/moby/sys/mountinfo v0.4.1 golang.org/x/sys v0.0.0-20210426230700-d19ff857e887 github.com/google/go-cmp v0.5.4 github.com/kr/pretty v0.2.1 github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417 Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
33 lines
1.7 KiB
Go
33 lines
1.7 KiB
Go
package libcontainer
|
|
|
|
import criu "github.com/checkpoint-restore/go-criu/v5/rpc"
|
|
|
|
type CriuPageServerInfo struct {
|
|
Address string // IP address of CRIU page server
|
|
Port int32 // port number of CRIU page server
|
|
}
|
|
|
|
type VethPairName struct {
|
|
ContainerInterfaceName string
|
|
HostInterfaceName string
|
|
}
|
|
|
|
type CriuOpts struct {
|
|
ImagesDirectory string // directory for storing image files
|
|
WorkDirectory string // directory to cd and write logs/pidfiles/stats to
|
|
ParentImage string // directory for storing parent image files in pre-dump and dump
|
|
LeaveRunning bool // leave container in running state after checkpoint
|
|
TcpEstablished bool // checkpoint/restore established TCP connections
|
|
ExternalUnixConnections bool // allow external unix connections
|
|
ShellJob bool // allow to dump and restore shell jobs
|
|
FileLocks bool // handle file locks, for safety
|
|
PreDump bool // call criu predump to perform iterative checkpoint
|
|
PageServer CriuPageServerInfo // allow to dump to criu page server
|
|
VethPairs []VethPairName // pass the veth to criu when restore
|
|
ManageCgroupsMode criu.CriuCgMode // dump or restore cgroup mode
|
|
EmptyNs uint32 // don't c/r properties for namespace from this mask
|
|
AutoDedup bool // auto deduplication for incremental dumps
|
|
LazyPages bool // restore memory pages lazily using userfaultfd
|
|
StatusFd int // fd for feedback when lazy server is ready
|
|
}
|