Container Storage Library
Go to file
Giuseppe Scrivano 77065edb97
layers: propagate down the idmapping settings
when creating a layer, propagate down the idmapping.

Signed-off-by: Giuseppe Scrivano <giuseppe@scrivano.org>
2019-05-01 18:31:19 +02:00
cmd/containers-storage storage: move the logic to detect rootless into utils.go 2019-04-05 15:11:57 +02:00
docs docs: add special handling for manpages in sect 5 2019-04-26 12:27:43 +02:00
drivers layers: propagate down the idmapping settings 2019-05-01 18:31:19 +02:00
hack Bump GITVALIDATE_EPOCH 2019-02-26 14:19:15 -05:00
opts Replace deprecated repo 'github.com/docker/engine-api' 2018-01-17 21:31:21 +08:00
pkg Fix possible integer overflow on 32bit builds 2019-04-16 10:36:35 +02:00
tests Fix handling of additional stores 2019-04-19 04:36:07 -04:00
vagrant vagrant: install ostree 2018-06-29 18:47:10 +02:00
vendor Drop github.com/containers/image from vendor.conf 2019-03-06 15:06:35 -05:00
.dockerignore Add vendor/pkg to .dockerignore 2015-12-04 17:03:24 -08:00
.gitignore Update packages to match latest code in moby/pkg 2017-09-12 18:00:29 +00:00
.mailmap Fix double entry in authors 2016-06-03 12:40:36 +02:00
.travis.yml Bump to latest golang for testing. 2019-03-19 09:22:12 -04:00
AUTHORS Fix double entry in authors 2016-06-03 12:40:36 +02:00
CONTRIBUTING.md Change cri-o IRC channel to container-projects in CONTRIBUTING.md 2017-10-26 17:02:34 -04:00
LICENSE Update LICENSE date 2015-12-31 13:07:35 +00:00
Makefile docs: add special handling for manpages in sect 5 2019-04-26 12:27:43 +02:00
NOTICE Update LICENSE date 2015-12-31 13:07:35 +00:00
README.md make: clean up .PHONY targets list 2018-10-31 19:03:59 +01:00
VERSION moved to 1.12.4-dev 2019-04-23 10:10:37 -04:00
Vagrantfile Vagrantfile: update to Fedora 28 2018-06-29 18:47:10 +02:00
containers.go Drop our dependency on github.com/containers/image 2019-03-06 15:06:34 -05:00
containers_ffjson.go add digest locks 2019-03-28 09:53:02 +01:00
errors.go lockfile: implement reader-writer locks 2019-02-15 09:49:44 +01:00
images.go Drop our dependency on github.com/containers/image 2019-03-06 15:06:34 -05:00
images_ffjson.go add digest locks 2019-03-28 09:53:02 +01:00
layers.go layers: propagate down the idmapping settings 2019-05-01 18:31:19 +02:00
layers_ffjson.go lockfile: implement reader-writer locks 2019-02-15 09:49:44 +01:00
lockfile.go Improve documentation of getLockfile 2019-04-02 23:02:31 +02:00
lockfile_linux.go lockfile: reshape for multiplatform 2018-01-30 05:00:58 -05:00
lockfile_otherunix.go Move lockfile_dawin.go to lockfile_otherunix.go to compile on freebsd 2019-03-08 05:05:14 -05:00
lockfile_test.go lockfile test: make concurrent RW test determinisitc 2019-04-09 10:30:26 +02:00
lockfile_unix.go Don't set (struct flock).l_pid 2019-04-02 23:02:31 +02:00
lockfile_windows.go Rename getLockFile to createLockerForPath, and document it 2019-04-02 23:02:31 +02:00
storage.conf Remove the last traces of the "override_kernel_check" option 2019-01-16 16:59:39 -05:00
store.go Fix handling of additional stores 2019-04-19 04:36:07 -04:00
utils.go utils: root in a userns uses global conf file 2019-04-23 14:12:03 +02:00
vendor.conf Drop github.com/containers/image from vendor.conf 2019-03-06 15:06:35 -05:00

README.md

storage is a Go library which aims to provide methods for storing filesystem layers, container images, and containers. A containers-storage CLI wrapper is also included for manual and scripting use.

To build the CLI wrapper, use 'make binary'.

Operations which use VMs expect to launch them using 'vagrant', defaulting to using its 'libvirt' provider. The boxes used are also available for the 'virtualbox' provider, and can be selected by setting $VAGRANT_PROVIDER to 'virtualbox' before kicking off the build.

The library manages three types of items: layers, images, and containers.

A layer is a copy-on-write filesystem which is notionally stored as a set of changes relative to its parent layer, if it has one. A given layer can only have one parent, but any layer can be the parent of multiple layers. Layers which are parents of other layers should be treated as read-only.

An image is a reference to a particular layer (its top layer), along with other information which the library can manage for the convenience of its caller. This information typically includes configuration templates for running a binary contained within the image's layers, and may include cryptographic signatures. Multiple images can reference the same layer, as the differences between two images may not be in their layer contents.

A container is a read-write layer which is a child of an image's top layer, along with information which the library can manage for the convenience of its caller. This information typically includes configuration information for running the specific container. Multiple containers can be derived from a single image.

Layers, images, and containers are represented primarily by 32 character hexadecimal IDs, but items of each kind can also have one or more arbitrary names attached to them, which the library will automatically resolve to IDs when they are passed in to API calls which expect IDs.

The library can store what it calls metadata for each of these types of items. This is expected to be a small piece of data, since it is cached in memory and stored along with the library's own bookkeeping information.

Additionally, the library can store one or more of what it calls big data for images and containers. This is a named chunk of larger data, which is only in memory when it is being read from or being written to its own disk file.

Contributing Information about contributing to this project.