spiegel_podman/pkg
Valentin Rothberg 219c69ef03 generate systemd: do not set KillMode
`KillMode=none` has been deprecated in systemd and is now throwing big
warnings when being used.  Users have reported the issues upstream
(see #8615) and on the mailing list.

This deprecation was mainly motivated by an abusive use of third-party
vendors causing all kinds of undesired side-effects.  For instance, busy
mounts that delay reboot.

After talking to the systemd team, we came up with the following plan:

 **Short term**: we can use TimeoutStopSec and remove KillMode=none which
 will default to cgroup.

 **Long term**: we want to change the type to sdnotify. The plumbing for
 Podman is done but we need it for conmon. Once sdnotify is working, we
 can get rid of the pidfile handling etc. and let Podman handle it.
 Michal Seklatar came up with a nice idea that Podman increase the time
 out on demand. That's a much cleaner way than hard-coding the time out
 in the unit as suggest in the short-term solution.

This change is executing the short-term plan and sets a minimum timeout
of 60 seconds.  User-specified timeouts are added to that.

Fixes: #8615
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-01-05 16:37:24 +01:00
..
annotations Spelling 2020-12-22 13:34:31 -05:00
api libpod API: pull: fix channel race 2021-01-04 17:46:24 +01:00
auth Add X-Registry-Config support 2020-09-29 08:46:44 -07:00
autoupdate Spelling 2020-12-22 13:34:31 -05:00
bindings Spelling 2020-12-22 13:34:31 -05:00
cgroups Spelling 2020-12-22 13:34:31 -05:00
channel fix closed the remote connection on pull causes service panic 2020-10-03 11:38:38 +08:00
checkpoint Lowercase some errors 2020-10-05 15:56:44 -07:00
copy Spelling 2020-12-22 13:34:31 -05:00
criu Add helper function to read out CRIU version 2018-10-23 12:52:03 +02:00
ctime Re-add int64 casts for ctime 2019-07-23 15:43:40 -04:00
domain Consolidate filter logic to pkg subdirectory 2020-12-24 20:27:41 +00:00
env Ensure DefaultEnvVariables is used in Specgen 2020-08-18 15:17:46 -04:00
errorhandling remote copy 2020-12-18 12:08:49 +01:00
hooks Spelling 2020-12-22 13:34:31 -05:00
inspect Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
kubeutils Remove dependency on kubernetes 2018-03-27 21:55:33 +00:00
lookup Turn on More linters 2020-06-15 07:05:56 -04:00
namespaces [CI:DOCS] BZ1860126 - Fix userns defaults in run man page 2020-08-07 15:42:13 -04:00
netns Spelling 2020-12-22 13:34:31 -05:00
parallel Move pod jobs to parallel execution 2020-10-07 10:00:11 -04:00
ps Consolidate filter logic to pkg subdirectory 2020-12-24 20:27:41 +00:00
registrar Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
registries pkg/registries: add a retiring note 2020-09-30 16:30:41 +02:00
resolvconf Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
rootless Spelling 2020-12-22 13:34:31 -05:00
rootlessport rootlessport: use two different channels 2020-04-29 12:35:23 +02:00
seccomp Spelling 2020-12-22 13:34:31 -05:00
selinux Fix SELinux functions names to not be repetitive 2020-04-23 15:57:34 -04:00
signal Fix build for mips architecture 2020-12-21 15:55:18 +01:00
specgen fix: disable seccomp by default when privileged. 2021-01-02 01:38:19 +01:00
systemd generate systemd: do not set KillMode 2021-01-05 16:37:24 +01:00
terminal Refine public key usage when remote 2020-12-10 15:32:37 -07:00
timetype make lint: enable gocritic 2020-01-13 14:27:02 +01:00
tracing make lint: include pkg/tracing 2020-01-14 09:54:48 +01:00
trust image sign using per user registries.d 2020-12-07 09:58:38 -05:00
util Spelling 2020-12-22 13:34:31 -05:00