Daniel Golle
|
5cb3715a07
jail: fix build on glibc and uclibc
|
4 years ago |
Daniel Golle
|
c482c5de77
jail: add support for referencing existing namespaces
|
4 years ago |
Rosen Penev
|
a4df90f257
jail: fix wrong format for 32-bit
|
4 years ago |
Rosen Penev
|
48777def2c
rcS: cast format string to int64_t
|
4 years ago |
Daniel Golle
|
66ae2d947e
jail: re-implement /proc/sys/net read-write in netns hack
|
4 years ago |
Daniel Golle
|
f91009a254
jail: refactor default mounts into new structure
|
4 years ago |
Daniel Golle
|
686cf7a5a9
jail: actually apply filesystem-specific mount options
|
4 years ago |
Daniel Golle
|
6f078ae8bb
jail: add support for defining devices
|
4 years ago |
Daniel Golle
|
f5f305e297
jail: move /tmp/resolv.conf.d to /dev/resolv.conf.d
|
4 years ago |
Daniel Golle
|
76adac5ef4
jail: /proc/$pid/oom_score_adj to OCI defined oomScoreAdj
|
4 years ago |
Daniel Golle
|
1c46cc3f84
jail: parse and apply POSIX rlimits
|
4 years ago |
Daniel Golle
|
0e1920cb00
jail: read and apply umask from OCI if defined
|
4 years ago |
Daniel Golle
|
c049047be4
jail: implement OCI user additionalGIDs
|
4 years ago |
Daniel Golle
|
1b1286bd18
jail: parse and apply OCI sysctl values
|
4 years ago |
Daniel Golle
|
9eddf0ff53
jail: fix hooks
|
4 years ago |
Daniel Golle
|
268126a3b1
jail: add support for maskedPaths and readonlyPaths
|
4 years ago |
Daniel Golle
|
bfce7d128d
jail: fix some more mount options
|
4 years ago |
Daniel Golle
|
86a5105c81
jail: fs: fix build on uClibc-ng
|
4 years ago |
Daniel Golle
|
b41f76b5a0
procd: fix compile if procd-ujail is not selected
|
4 years ago |
Daniel Golle
|
8d5208f044
jail: fix false return in case of nofail mount
|
4 years ago |
Daniel Bailey
|
b2230e4ff2
procd: add service instance watchdog
|
4 years ago |
Daniel Golle
|
639df57cec
uxc: fix build with uClibc-ng
|
4 years ago |
Daniel Golle
|
dacab12b30
uxc: fix 'stop' command
|
4 years ago |
Daniel Golle
|
b586e7d693
jail: don't make mount source read-only
|
4 years ago |
Daniel Golle
|
71e75f4011
jail: refactor mount support to cover OCI spec
|
4 years ago |
Daniel Golle
|
02eec92886
jail: memory allocation fixes
|
4 years ago |
Daniel Golle
|
fc9f614bf7
jail: parse and run OCI hooks
|
4 years ago |
Daniel Golle
|
83f4b72ab1
jail: actually chdir into OCI defined CWD
|
4 years ago |
Daniel Golle
|
42a6217d42
jail: consider PATH for argv in OCI container
|
4 years ago |
Daniel Golle
|
9d0f831834
jail: fix segfault with len(uidmap/gidmap) > 1
|
4 years ago |