 Daniel Golle
|
afbaba926d
initd: attempt to mount cgroup2
|
4 éve |
|
Daniel Golle
|
47a9f0d652
service: add method to query available container features
|
4 éve |
|
Daniel Golle
|
2ae5cbcf1d
uxc: remove debugging left-over
|
4 éve |
|
Daniel Golle
|
28be01131d
instance: make sure values are not inherited from previous runs
|
4 éve |
|
Daniel Golle
|
08133b8e1d
uxc: use new container.%s kill ubus API
|
4 éve |
|
Daniel Golle
|
2d811a4b88
jail: add 'kill' method to container.%s object
|
4 éve |
|
Daniel Golle
|
12740336b3
uxc: fix create operation
|
4 éve |
|
Daniel Golle
|
9d5fa0ae99
uxc: behave more like a compliant OCI run-time
|
4 éve |
|
Daniel Golle
|
8ff89701c1
jail: add some remaining OCI features
|
4 éve |
|
Daniel Golle
|
c3ca99f111
jail: serialize hook execution
|
4 éve |
|
Daniel Golle
|
5cb3715a07
jail: fix build on glibc and uclibc
|
4 éve |
|
Daniel Golle
|
c482c5de77
jail: add support for referencing existing namespaces
|
4 éve |
 Rosen Penev
|
a4df90f257
jail: fix wrong format for 32-bit
|
4 éve |
|
Rosen Penev
|
48777def2c
rcS: cast format string to int64_t
|
4 éve |
|
Daniel Golle
|
66ae2d947e
jail: re-implement /proc/sys/net read-write in netns hack
|
4 éve |
|
Daniel Golle
|
f91009a254
jail: refactor default mounts into new structure
|
4 éve |
|
Daniel Golle
|
686cf7a5a9
jail: actually apply filesystem-specific mount options
|
4 éve |
|
Daniel Golle
|
6f078ae8bb
jail: add support for defining devices
|
4 éve |
|
Daniel Golle
|
f5f305e297
jail: move /tmp/resolv.conf.d to /dev/resolv.conf.d
|
4 éve |
|
Daniel Golle
|
76adac5ef4
jail: /proc/$pid/oom_score_adj to OCI defined oomScoreAdj
|
4 éve |
|
Daniel Golle
|
1c46cc3f84
jail: parse and apply POSIX rlimits
|
4 éve |
|
Daniel Golle
|
0e1920cb00
jail: read and apply umask from OCI if defined
|
4 éve |
|
Daniel Golle
|
c049047be4
jail: implement OCI user additionalGIDs
|
4 éve |
|
Daniel Golle
|
1b1286bd18
jail: parse and apply OCI sysctl values
|
4 éve |
|
Daniel Golle
|
9eddf0ff53
jail: fix hooks
|
4 éve |
|
Daniel Golle
|
268126a3b1
jail: add support for maskedPaths and readonlyPaths
|
4 éve |
|
Daniel Golle
|
bfce7d128d
jail: fix some more mount options
|
4 éve |
|
Daniel Golle
|
86a5105c81
jail: fs: fix build on uClibc-ng
|
4 éve |
|
Daniel Golle
|
b41f76b5a0
procd: fix compile if procd-ujail is not selected
|
4 éve |
|
Daniel Golle
|
8d5208f044
jail: fix false return in case of nofail mount
|
4 éve |
