4 commits

Author	SHA1	Message	Date
Anusha Ragunathan	f97f3e98fc	When using systemd, pass expected cgroupsPath and cli options to runc. ... runc expects a systemd cgroupsPath to be in slice:scopePrefix:containerName format and the "--systemd-cgroup" option to be set. Update docker accordingly. Fixes 21475 Signed-off-by: Anusha Ragunathan <anusha@docker.com> (cherry picked from commit 7ed3d265a4)	2016-03-31 18:35:03 -04:00
Tonis Tiigi	c5e8051c81	Fix setting cgroup permission to user/privileged devices ... Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com> (cherry picked from commit ee61235880)	2016-03-25 13:43:07 -04:00
Phil Estes	2b278f4846	Allow net and IPC namespaces to be shared when userns=on ... Now that the namespace sharing code via runc is vendored with the containerd changes, we can disable the restrictions on container to container net and IPC namespace sharing when the daemon has user namespaces enabled. Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com> (github: estesp)	2016-03-21 22:20:26 -04:00
Tonis Tiigi	9c4570a958	Replace execdrivers with containerd implementation ... Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com> Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com> Signed-off-by: Anusha Ragunathan <anusha@docker.com>	2016-03-18 13:38:32 -07:00