spiegel_podman/cmd/podman/containers
Stefano Brivio aa47e05ae4 libpod: Add pasta networking mode
Conceptually equivalent to networking by means of slirp4netns(1),
with a few practical differences:

- pasta(1) forks to background once networking is configured in the
  namespace and quits on its own once the namespace is deleted:
  file descriptor synchronisation and PID tracking are not needed

- port forwarding is configured via command line options at start-up,
  instead of an API socket: this is taken care of right away as we're
  about to start pasta

- there's no need for further selection of port forwarding modes:
  pasta behaves similarly to containers-rootlessport for local binds
  (splice() instead of read()/write() pairs, without L2-L4
  translation), and keeps the original source address for non-local
  connections like slirp4netns does

- IPv6 is not an experimental feature, and enabled by default. IPv6
  port forwarding is supported

- by default, addresses and routes are copied from the host, that is,
  container users will see the same IP address and routes as if they
  were in the init namespace context. The interface name is also
  sourced from the host upstream interface with the first default
  route in the routing table. This is also configurable as documented

- sandboxing and seccomp(2) policies cannot be disabled

- only rootless mode is supported.

See https://passt.top for more details about pasta.

Also add a link to the maintained build of pasta(1) manual as valid
in the man page cross-reference checks: that's where the man page
for the latest build actually is -- it's not on Github and it doesn't
match any existing pattern, so add it explicitly.

Signed-off-by: Stefano Brivio <sbrivio@redhat.com>
2022-11-08 00:16:35 +01:00
..
attach.go cmd/podman: switch to golang native error wrapping 2022-06-30 12:58:57 +02:00
checkpoint.go Output messages display rawInput 2022-08-02 18:28:37 +09:00
cleanup.go Output messages display rawInput 2022-08-02 18:28:37 +09:00
clone.go implement podman update 2022-09-01 13:02:01 -04:00
commit.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
container.go bump go module to version 4 2022-01-18 12:47:07 +01:00
cp.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
create.go libpod: Add pasta networking mode 2022-11-08 00:16:35 +01:00
diff.go cmd/podman: switch to golang native error wrapping 2022-06-30 12:58:57 +02:00
exec.go Fix stutters 2022-09-10 07:52:00 -04:00
exists.go bump go module to version 4 2022-01-18 12:47:07 +01:00
export.go cmd/podman: switch to golang native error wrapping 2022-06-30 12:58:57 +02:00
init.go Output messages display rawInput 2022-08-02 18:28:37 +09:00
inspect.go shell completion: update podman inspect --type options 2022-05-19 14:04:22 +02:00
kill.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
list.go bump go module to version 4 2022-01-18 12:47:07 +01:00
logs.go Fix stutters 2022-09-10 07:52:00 -04:00
mount.go cmd/podman: switch to golang native error wrapping 2022-06-30 12:58:57 +02:00
pause.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
port.go cmd/podman: switch to golang native error wrapping 2022-06-30 12:58:57 +02:00
prune.go bump go module to version 4 2022-01-18 12:47:07 +01:00
ps.go use cached containers.conf 2022-10-21 14:03:14 +02:00
rename.go cmd/podman: switch to golang native error wrapping 2022-06-30 12:58:57 +02:00
restart.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
restore.go Revert "cmd/podman: add support for checkpoint images" 2022-10-11 07:55:16 -04:00
rm.go remove container/pod id file along with container/pod 2022-11-03 17:07:09 +01:00
run.go Revert "cmd/podman: add support for checkpoint images" 2022-10-11 07:55:16 -04:00
runlabel.go bump go module to version 4 2022-01-18 12:47:07 +01:00
start.go Merge pull request #15134 from sstosh/improve-output 2022-08-09 06:13:10 +00:00
stats.go Add podman stats --no-trunc option 2022-08-17 13:16:01 -04:00
stop.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
top.go cmd/podman: switch to golang native error wrapping 2022-06-30 12:58:57 +02:00
unmount.go Combine the CheckAllLatest CID and PodID functions 2022-05-26 11:12:40 -04:00
unpause.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
update.go implement podman update 2022-09-01 13:02:01 -04:00
wait.go podman wait can take multiple conditions 2022-07-08 05:26:56 -04:00