Commit Graph

795 Commits

Author SHA1 Message Date
Daniel J Walsh d99cf98866 Merge pull request #75 from rhatdan/caps
list of label specification for required capabilities
2020-02-25 06:11:48 -05:00
Daniel J Walsh 112e5a7b20 list of label specification for required capabilties
These labels allows users to specify the list of capabilities required
to run their container image.

Setting a image/container label "io.containers.capabilities=setuid,setgid"
will tell container engines that the contained image should work fine withi
just these two capabilties, instead of running with the default capabilities,

Defined as a list, since this has not been standardized yet, we want to make
this a standard, and the standard label might be different then the label we
choose, so eventually we might need to add a standard label.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-23 06:19:35 -05:00
Daniel J Walsh d8ecc3ce53 Merge pull request #74 from rhatdan/vendor
Vendor
2020-02-21 14:12:33 -05:00
Daniel J Walsh 0e8e98c5f3 Move to v0.4.2-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-21 12:58:40 -05:00
Daniel J Walsh d592faeb27 Bump to v0.4.1
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-21 12:58:20 -05:00
Daniel J Walsh fc78240745 Merge pull request #72 from rhatdan/stoptimeout
Add StopTimeout for podman
2020-02-21 12:57:36 -05:00
Daniel J Walsh 00b0aae703 Add StopTimeout for podman
Allow users to modify the default ammount of time to wait to send SIGKILL
after you tell a container to stop with a SIGINT.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-21 11:32:16 -05:00
Daniel J Walsh 5725c54f72 Merge pull request #73 from rhatdan/vendor
Update vendor of SELinux and containers/storage
2020-02-21 11:26:35 -05:00
Daniel J Walsh 863988d2af Update vendor of SELinux and containers/storage
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-21 10:32:11 -05:00
Daniel J Walsh 79e525d832 Merge pull request #71 from rhatdan/version
Version
2020-02-20 17:12:39 -05:00
Daniel J Walsh f725dc4ba7 Move to v0.4.1-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-20 15:08:13 -05:00
Daniel J Walsh 2b628aea6a Bump to v0.4.0
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-20 15:07:49 -05:00
Daniel J Walsh 14487089a0 Merge pull request #70 from rhatdan/cgroup_manager
CgroupManager should belong to libpod not containers
2020-02-20 12:00:39 -05:00
Daniel J Walsh 3d6b785749 CgroupManager should belong to libpod not containers
CgroupManager is defined for managing containers, it is not defined
per container.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-20 10:27:47 -05:00
Daniel J Walsh 8bd736f5cc Merge pull request #69 from giuseppe/add-setfcap
config: add CAP_SETFCAP to the default capabilities
2020-02-20 09:39:18 -05:00
Daniel J Walsh c5a69104d7 Merge pull request #68 from rhatdan/additional
Remove additional_ adjective from containers.conf
2020-02-20 09:35:20 -05:00
Giuseppe Scrivano b1841747ed config: add CAP_SETFCAP to the default capabilities
it is needed by Buildah to set file capabilities.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2020-02-20 09:49:01 +01:00
Daniel J Walsh ad4b16c9d2 Remove additional_ adjective from containers.conf
Additional is implied, so should not be stated.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-19 09:48:11 -05:00
Daniel J Walsh 56c6f79938 Merge pull request #67 from rhatdan/version
Bump to v0.3.0
2020-02-18 14:38:28 -05:00
Daniel J Walsh 9a542c8128 Move to v0.3.1-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-18 14:32:31 -05:00
Daniel J Walsh 8cf0d848e4 Bump to v0.3.0
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-18 14:32:04 -05:00
Daniel J Walsh 862583d397 Merge pull request #63 from ArangoGutierrez/issue_62
Add annotations into containers.conf file
2020-02-18 14:30:43 -05:00
Daniel J Walsh 6161b218de Merge pull request #65 from vrothberg/capabilities
pkg/capabilities
2020-02-18 14:00:55 -05:00
Valentin Rothberg 2a58a0e73b rm _output dir
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2020-02-18 15:58:33 +01:00
Valentin Rothberg 130c712a05 pkg/capabilities
Replace pkg/caps with pkg/capabilities (from libpod).  It's also a fork
from Docker but attributes its origing with copyright notes and has a
trimmed down (and faster) API.

Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2020-02-18 15:58:19 +01:00
Carlos Eduardo Arango Gutierrez a93c9e5022 fix typo on var declaration
Signed-off-by: Carlos Eduardo Arango Gutierrez <carangog@redhat.com>
2020-02-18 07:19:27 -05:00
Carlos Eduardo Arango Gutierrez 3e885a69c4 Add annotations into containers.conf file
Closes #62

Signed-off-by: Carlos Eduardo Arango Gutierrez <carangog@redhat.com>
2020-02-17 19:42:11 -05:00
Carlos Eduardo Arango Gutierrez 0d15312d27 Fix lint on default.go
Signed-off-by: Carlos Eduardo Arango Gutierrez <carangog@redhat.com>
2020-02-17 18:18:14 -05:00
Carlos Eduardo Arango Gutierrez be1f3f6caa fix gofmt on file config_test.go
apply `gofmt -s -w config_test.go`

Signed-off-by: Carlos Eduardo Arango Gutierrez <carangog@redhat.com>
2020-02-17 18:13:03 -05:00
Carlos Eduardo Arango Gutierrez 6309277061 Fix misspell on config.go
Line 255:"guarantess" is a misspelling of "guarantees" (misspell)
Line 292:"guarantess" is a misspelling of "guarantees" (misspell)
rm some double spaces

Signed-off-by: Carlos Eduardo Arango Gutierrez <carangog@redhat.com>
2020-02-17 18:10:26 -05:00
Daniel J Walsh ff0d6f4f28 Merge pull request #61 from rhatdan/version
bump to v0.2.1
2020-02-13 05:13:05 -05:00
Daniel J Walsh c16be50d41 Move to v0.2.2-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-13 05:12:16 -05:00
Daniel J Walsh 2b91b7d58e Bump to v0.2.1
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-13 05:11:53 -05:00
Giuseppe Scrivano 853bd2fcc0 Merge pull request #60 from rhatdan/version
Use slirp4netns for default network when in rootless mode
2020-02-13 10:04:00 +01:00
Daniel J Walsh a0f632a9d3 Use slirp4netns for default network when in rootless mode
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-12 21:11:56 -05:00
Daniel J Walsh 4e2b7040cd Merge pull request #59 from rhatdan/version
Bump to v0.2.0
2020-02-10 09:38:29 -05:00
Daniel J Walsh 876aac9e27 Move to v0.2.1-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-10 09:23:54 -05:00
Daniel J Walsh b229df6eef Bump to v0.2.0
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-10 09:23:54 -05:00
Valentin Rothberg d582456fd5 Merge pull request #58 from rhatdan/nofile
Add Default function to read containers config
2020-02-10 14:52:04 +01:00
Daniel J Walsh 4fa425fe38 Add Default function to read containers config
This function should be called to return a default config to be used
by callers.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-10 08:21:07 -05:00
Daniel J Walsh b8997e6c2e Merge pull request #57 from rhatdan/nofile
Don't up the default number of open files, just processes.
2020-02-05 15:15:51 -05:00
Daniel J Walsh aaaac87784 Don't up the default number of open files, just processes.
Python call to Popen attempt to close all open file descriptors by looking at
the maximum number of open file descripors defined in ulimits.  If we set
this to a huge number by default Popen will run much slower since it will
attempt to close the total number of FDs one by one.

We should just use the default that the calling process had unless the user
overrides the default in containers.conf.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-05 10:46:28 -05:00
Daniel J Walsh c6507e7b68 Merge pull request #55 from rhatdan/version
Bump to v0.1.4
2020-02-04 09:34:50 -05:00
Daniel J Walsh 3212a8b981 Move to v0.1.5-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-04 07:38:26 -05:00
Daniel J Walsh 9362847d72 Bump to v0.1.4
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-02-04 07:37:57 -05:00
Daniel J Walsh ca42752ca9 Merge pull request #54 from openSUSE/32bit-build
Add 32bit build to travis
2020-02-04 07:37:13 -05:00
Sascha Grunert 311b961e6f Add 32bit build to travis
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-02-04 13:22:10 +01:00
Daniel J Walsh 46d6f01773 Merge pull request #52 from rhatdan/version
Setup default ulimits to nproc & nofile of current process
2020-02-04 07:02:06 -05:00
Daniel J Walsh ccfe27f58c Merge pull request #53 from openSUSE/32bit-fix
Fix 32bit build by using unix.CGROUP2_SUPER_MAGIC
2020-02-04 07:01:45 -05:00
Sascha Grunert 38c952b22d Fix 32bit build by using unix.CGROUP2_SUPER_MAGIC
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
2020-02-04 11:30:40 +01:00