moby--moby/libcontainerd/supervisor
Cory Snider 1f22b15030 Lock OS threads when exec'ing with Pdeathsig
On Linux, when (os/exec.Cmd).SysProcAttr.Pdeathsig is set, the signal
will be sent to the process when the OS thread on which cmd.Start() was
executed dies. The runtime terminates an OS thread when a goroutine
exits after being wired to the thread with runtime.LockOSThread(). If
other goroutines are allowed to be scheduled onto a thread which called
cmd.Start(), an unrelated goroutine could cause the thread to be
terminated and prematurely signal the command. See
https://github.com/golang/go/issues/27505 for more information.

Prevent started subprocesses with Pdeathsig from getting signaled
prematurely by wiring the starting goroutine to the OS thread until the
subprocess has exited. No other goroutines can be scheduled onto a
locked thread so it will remain alive until unlocked or the daemon
process exits.

Signed-off-by: Cory Snider <csnider@mirantis.com>
2022-10-05 12:18:03 -04:00
..
remote_daemon.go Lock OS threads when exec'ing with Pdeathsig 2022-10-05 12:18:03 -04:00
remote_daemon_linux.go libcontainerd/supervisor: platformCleanup(): use canonical socket address 2022-08-11 14:09:36 +02:00
remote_daemon_options.go libcontainerd/supervisor: don't write log-level to config file 2022-08-11 14:11:06 +02:00
remote_daemon_options_linux.go libcontainerd/supervisor: make supervisor adjust OOM score for containerd 2022-08-11 14:11:01 +02:00
remote_daemon_windows.go Remove 'docker-' prefix for containerd and runc binaries 2018-09-24 21:49:03 +00:00
utils_linux.go libcontainerd: split client and supervisor 2018-08-06 10:23:04 -07:00
utils_windows.go libcontainerd: split client and supervisor 2018-08-06 10:23:04 -07:00