2014-07-31 16:36:42 -04:00
|
|
|
package daemon
|
|
|
|
|
|
|
|
import (
|
2014-11-10 16:14:17 -05:00
|
|
|
"fmt"
|
|
|
|
|
2014-07-31 16:36:42 -04:00
|
|
|
"github.com/docker/docker/engine"
|
|
|
|
"github.com/docker/docker/graph"
|
|
|
|
"github.com/docker/docker/pkg/parsers"
|
|
|
|
"github.com/docker/docker/runconfig"
|
2014-11-10 16:14:17 -05:00
|
|
|
"github.com/docker/libcontainer/label"
|
2014-07-31 16:36:42 -04:00
|
|
|
)
|
|
|
|
|
|
|
|
func (daemon *Daemon) ContainerCreate(job *engine.Job) engine.Status {
|
|
|
|
var name string
|
|
|
|
if len(job.Args) == 1 {
|
|
|
|
name = job.Args[0]
|
|
|
|
} else if len(job.Args) > 1 {
|
|
|
|
return job.Errorf("Usage: %s", job.Name)
|
|
|
|
}
|
|
|
|
config := runconfig.ContainerConfigFromJob(job)
|
2014-09-22 16:50:36 -04:00
|
|
|
if config.Memory != 0 && config.Memory < 4194304 {
|
|
|
|
return job.Errorf("Minimum memory limit allowed is 4MB")
|
2014-07-31 16:36:42 -04:00
|
|
|
}
|
|
|
|
if config.Memory > 0 && !daemon.SystemConfig().MemoryLimit {
|
|
|
|
job.Errorf("Your kernel does not support memory limit capabilities. Limitation discarded.\n")
|
|
|
|
config.Memory = 0
|
|
|
|
}
|
|
|
|
if config.Memory > 0 && !daemon.SystemConfig().SwapLimit {
|
|
|
|
job.Errorf("Your kernel does not support swap limit capabilities. Limitation discarded.\n")
|
|
|
|
config.MemorySwap = -1
|
|
|
|
}
|
2014-09-25 17:23:59 -04:00
|
|
|
|
|
|
|
var hostConfig *runconfig.HostConfig
|
|
|
|
if job.EnvExists("HostConfig") {
|
|
|
|
hostConfig = runconfig.ContainerHostConfigFromJob(job)
|
|
|
|
} else {
|
|
|
|
// Older versions of the API don't provide a HostConfig.
|
|
|
|
hostConfig = nil
|
|
|
|
}
|
|
|
|
|
|
|
|
container, buildWarnings, err := daemon.Create(config, hostConfig, name)
|
2014-07-31 16:36:42 -04:00
|
|
|
if err != nil {
|
|
|
|
if daemon.Graph().IsNotExist(err) {
|
|
|
|
_, tag := parsers.ParseRepositoryTag(config.Image)
|
|
|
|
if tag == "" {
|
|
|
|
tag = graph.DEFAULTTAG
|
|
|
|
}
|
|
|
|
return job.Errorf("No such image: %s (tag: %s)", config.Image, tag)
|
|
|
|
}
|
|
|
|
return job.Error(err)
|
|
|
|
}
|
|
|
|
if !container.Config.NetworkDisabled && daemon.SystemConfig().IPv4ForwardingDisabled {
|
|
|
|
job.Errorf("IPv4 forwarding is disabled.\n")
|
|
|
|
}
|
2014-07-31 07:50:59 -04:00
|
|
|
container.LogEvent("create")
|
2014-12-01 11:44:13 -05:00
|
|
|
|
|
|
|
job.Printf("%s\n", container.ID)
|
|
|
|
|
2014-07-31 16:36:42 -04:00
|
|
|
for _, warning := range buildWarnings {
|
|
|
|
job.Errorf("%s\n", warning)
|
|
|
|
}
|
2014-03-10 09:11:23 -04:00
|
|
|
|
2014-07-31 16:36:42 -04:00
|
|
|
return engine.StatusOK
|
|
|
|
}
|
|
|
|
|
|
|
|
// Create creates a new container from the given configuration with a given name.
|
2014-09-25 17:23:59 -04:00
|
|
|
func (daemon *Daemon) Create(config *runconfig.Config, hostConfig *runconfig.HostConfig, name string) (*Container, []string, error) {
|
2014-07-31 16:36:42 -04:00
|
|
|
var (
|
|
|
|
container *Container
|
|
|
|
warnings []string
|
|
|
|
)
|
|
|
|
|
|
|
|
img, err := daemon.repositories.LookupImage(config.Image)
|
|
|
|
if err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
2014-08-14 20:43:12 -04:00
|
|
|
if err := img.CheckDepth(); err != nil {
|
2014-07-31 16:36:42 -04:00
|
|
|
return nil, nil, err
|
|
|
|
}
|
|
|
|
if warnings, err = daemon.mergeAndVerifyConfig(config, img); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
2014-11-03 17:57:18 -05:00
|
|
|
if hostConfig != nil && hostConfig.SecurityOpt == nil {
|
|
|
|
hostConfig.SecurityOpt, err = daemon.GenerateSecurityOpt(hostConfig.IpcMode)
|
2014-11-10 16:14:17 -05:00
|
|
|
if err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
|
|
|
}
|
2014-07-31 16:36:42 -04:00
|
|
|
if container, err = daemon.newContainer(name, config, img); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
2014-09-29 20:06:26 -04:00
|
|
|
if err := daemon.Register(container); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
2014-07-31 16:36:42 -04:00
|
|
|
if err := daemon.createRootfs(container, img); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
2014-09-25 17:23:59 -04:00
|
|
|
if hostConfig != nil {
|
|
|
|
if err := daemon.setHostConfig(container, hostConfig); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
|
|
|
}
|
2014-11-11 11:17:33 -05:00
|
|
|
if err := container.Mount(); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
|
|
|
defer container.Unmount()
|
|
|
|
if err := container.prepareVolumes(); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
2014-07-31 16:36:42 -04:00
|
|
|
if err := container.ToDisk(); err != nil {
|
|
|
|
return nil, nil, err
|
|
|
|
}
|
|
|
|
return container, warnings, nil
|
|
|
|
}
|
2014-12-01 11:44:13 -05:00
|
|
|
|
2014-11-10 16:14:17 -05:00
|
|
|
func (daemon *Daemon) GenerateSecurityOpt(ipcMode runconfig.IpcMode) ([]string, error) {
|
|
|
|
if ipcMode.IsHost() {
|
|
|
|
return label.DisableSecOpt(), nil
|
|
|
|
}
|
|
|
|
if ipcContainer := ipcMode.Container(); ipcContainer != "" {
|
|
|
|
c := daemon.Get(ipcContainer)
|
|
|
|
if c == nil {
|
|
|
|
return nil, fmt.Errorf("no such container to join IPC: %s", ipcContainer)
|
|
|
|
}
|
|
|
|
if !c.IsRunning() {
|
|
|
|
return nil, fmt.Errorf("cannot join IPC of a non running container: %s", ipcContainer)
|
|
|
|
}
|
|
|
|
|
|
|
|
return label.DupSecOpt(c.ProcessLabel), nil
|
|
|
|
}
|
|
|
|
return nil, nil
|
|
|
|
}
|