mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
072400fc4b
This adds both a daemon-wide flag and a container creation property: - Set the `CgroupnsMode: "host|private"` HostConfig property at container creation time to control what cgroup namespace the container is created in - Set the `--default-cgroupns-mode=host|private` daemon flag to control what cgroup namespace containers are created in by default - Set the default if the daemon flag is unset to "host", for backward compatibility - Default to CgroupnsMode: "host" for client versions < 1.40 Signed-off-by: Rob Gulewich <rgulewich@netflix.com>
50 lines
1.4 KiB
Go
50 lines
1.4 KiB
Go
// +build !windows
|
|
|
|
package daemon // import "github.com/docker/docker/internal/test/daemon"
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"github.com/docker/docker/internal/test"
|
|
"golang.org/x/sys/unix"
|
|
"gotest.tools/assert"
|
|
)
|
|
|
|
func cleanupNetworkNamespace(t testingT, execRoot string) {
|
|
if ht, ok := t.(test.HelperT); ok {
|
|
ht.Helper()
|
|
}
|
|
// Cleanup network namespaces in the exec root of this
|
|
// daemon because this exec root is specific to this
|
|
// daemon instance and has no chance of getting
|
|
// cleaned up when a new daemon is instantiated with a
|
|
// new exec root.
|
|
netnsPath := filepath.Join(execRoot, "netns")
|
|
filepath.Walk(netnsPath, func(path string, info os.FileInfo, err error) error {
|
|
if err := unix.Unmount(path, unix.MNT_DETACH); err != nil && err != unix.EINVAL && err != unix.ENOENT {
|
|
t.Logf("unmount of %s failed: %v", path, err)
|
|
}
|
|
os.Remove(path)
|
|
return nil
|
|
})
|
|
}
|
|
|
|
// CgroupNamespace returns the cgroup namespace the daemon is running in
|
|
func (d *Daemon) CgroupNamespace(t assert.TestingT) string {
|
|
link, err := os.Readlink(fmt.Sprintf("/proc/%d/ns/cgroup", d.Pid()))
|
|
assert.NilError(t, err)
|
|
|
|
return strings.TrimSpace(link)
|
|
}
|
|
|
|
// SignalDaemonDump sends a signal to the daemon to write a dump file
|
|
func SignalDaemonDump(pid int) {
|
|
unix.Kill(pid, unix.SIGQUIT)
|
|
}
|
|
|
|
func signalDaemonReload(pid int) error {
|
|
return unix.Kill(pid, unix.SIGHUP)
|
|
}
|