spiegel_podman/libpod
Matthew Heon d377a51578 Replace existing iptables handler with firewall code
Use the new firewall code vendored from CNI to replace the
existing iptables rule addition handler we had in place. This
adds proper support for firewalld and should be much better at
interacting with the firewall.

Signed-off-by: Matthew Heon <matthew.heon@gmail.com>

Closes: #1431
Approved by: baude
2018-09-10 18:53:27 +00:00
..
common Change un/pwd handling to match Buildah's 2018-02-06 09:29:23 -05:00
driver switch projectatomic to containers 2018-08-16 17:12:36 +00:00
image Print errors from individual pull attempts 2018-09-05 23:38:28 +00:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
testdata Add hooks support to podman 2018-04-05 14:13:49 +00:00
boltdb_state.go Make failure to retrieve individual ctrs/pods nonfatal 2018-08-17 19:10:21 +00:00
boltdb_state_internal.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
boltdb_state_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
boltdb_state_unsupported.go Fix build on non-linux platforms 2018-07-31 14:19:50 +00:00
common_test.go Rework state testing to allow State structs to be empty 2018-07-31 14:19:50 +00:00
container.go Swap from FFJSON to easyjson 2018-08-24 19:19:43 +00:00
container_api.go Up time between checks for podman wait 2018-08-31 13:18:34 -04:00
container_attach.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
container_commit.go Vendor in latest projectatomic/buildah 2018-08-23 19:11:09 +00:00
container_easyjson.go Regenerate easyjson after rebase 2018-08-24 19:19:43 +00:00
container_graph.go Remove a loop in container graph 2018-03-29 02:18:45 +00:00
container_graph_test.go Fix tests 2018-03-29 02:18:45 +00:00
container_inspect.go Reveal information about container capabilities 2018-08-24 12:16:19 +00:00
container_internal.go container: resolve rootfs symlinks 2018-08-31 17:37:20 +00:00
container_internal_linux.go Fix Mount Propagation 2018-08-27 13:26:28 +00:00
container_internal_test.go vendor containerd/cgroups 2018-09-06 15:19:25 +00:00
container_internal_unsupported.go Remove now-unneeded cleanupCgroup() for unsupported OS 2018-07-06 15:29:38 +00:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_top_linux.go vendor latest containers/psgo 2018-07-26 17:01:40 +00:00
container_top_unsupported.go podman-top: use containers/psgo 2018-07-19 20:47:52 +00:00
container_unsupported.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
diff.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
errors.go Add namespaces and initial constraints to database 2018-07-24 16:12:31 -04:00
in_memory_state.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
info.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
networking_linux.go Replace existing iptables handler with firewall code 2018-09-10 18:53:27 +00:00
networking_unsupported.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
oci.go rootless, exec: use the new function to join the userns 2018-08-29 16:25:20 +00:00
oci_linux.go rootless: check uid with Geteuid() instead of Getuid() 2018-09-04 14:36:57 +00:00
oci_unsupported.go Have info print conmon/oci runtime information 2018-08-07 14:16:26 +00:00
options.go Refactor error checking in With*NSFromPod options 2018-08-23 18:16:28 +00:00
pod.go Swap from FFJSON to easyjson 2018-08-24 19:19:43 +00:00
pod_api.go Fixing network ns segfault 2018-08-23 18:16:28 +00:00
pod_easyjson.go Regenerate easyjson after rebase 2018-08-24 19:19:43 +00:00
pod_internal.go Change pause container to infra container 2018-08-23 18:16:28 +00:00
pod_top_linux.go Add podman pod top 2018-08-23 15:01:17 +00:00
pod_top_unsupported.go Add podman pod top 2018-08-23 15:01:17 +00:00
runtime.go Vendor CNI plugins firewall code 2018-09-10 18:53:27 +00:00
runtime_ctr.go Fixing network ns segfault 2018-08-23 18:16:28 +00:00
runtime_img.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_img_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_pod.go Fixing network ns segfault 2018-08-23 18:16:28 +00:00
runtime_pod_infra_linux.go rootless: create compatible pod infra container 2018-09-04 14:36:57 +00:00
runtime_pod_linux.go Start pod infra container when pod is created 2018-09-06 16:16:59 +00:00
runtime_pod_unsupported.go Added option to share kernel namespaces in libpod and podman 2018-08-23 18:16:28 +00:00
state.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
state_test.go Rework state testing to allow State structs to be empty 2018-07-31 14:19:50 +00:00
stats.go Changed GetContainerStats to return ErrCtrStateInvalid 2018-08-23 15:58:08 +00:00
stats_config.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
stats_unsupported.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
storage.go Add --force to podman umount to force the unmounting of the rootfs 2018-08-01 17:53:30 +00:00
util.go Refactor error checking in With*NSFromPod options 2018-08-23 18:16:28 +00:00
util_linux.go Fix build on non-Linux OSes 2018-08-15 18:07:04 +00:00
util_test.go Stage3 Image Library 2018-03-14 20:21:31 +00:00
util_unsupported.go Fix build on non-Linux OSes 2018-08-15 18:07:04 +00:00
version.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00