spiegel_podman/libpod
Gabi Beyer 80dcd4bebc rootless: Rearrange setup of rootless containers
In order to run Podman with VM-based runtimes unprivileged, the
network must be set up prior to the container creation. Therefore
this commit modifies Podman to run rootless containers by:
  1. create a network namespace
  2. pass the netns persistent mount path to the slirp4netns
     to create the tap inferface
  3. pass the netns path to the OCI spec, so the runtime can
     enter the netns

Closes #2897

Signed-off-by: Gabi Beyer <gabrielle.n.beyer@intel.com>
2019-07-30 23:28:52 +00:00
..
common Set blob cache directory based on GraphDriver 2019-03-29 08:27:33 -04:00
define refactor to reduce duplicated error parsing 2019-07-23 16:49:04 -04:00
driver Begin to break up pkg/inspect 2019-06-03 15:54:53 -04:00
events golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
image Fix possible runtime panic if image history len is zero 2019-07-25 12:45:08 +02:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
lock trivial cleanups from golang 2019-07-03 15:41:33 -05:00
logs golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
boltdb_state.go first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
boltdb_state_internal.go first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
boltdb_state_linux.go podman-remote inspect 2019-01-18 15:43:11 -06:00
boltdb_state_unsupported.go podman-remote inspect 2019-01-18 15:43:11 -06:00
common_test.go code cleanup 2019-07-08 09:18:11 -05:00
container.go Add comment to describe postConfigureNetNS 2019-07-30 23:28:52 +00:00
container.log.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_api.go move editing of exitCode to runtime 2019-07-23 13:29:33 -04:00
container_commit.go Fix commit --changes env=X=Y 2019-07-26 16:04:17 -07:00
container_graph.go golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
container_graph_test.go Update unit tests to use in-memory lock manager 2019-01-04 09:51:09 -05:00
container_inspect.go golangci-lint phase 4 2019-07-22 15:44:04 -05:00
container_internal.go Merge pull request #3233 from wking/fatal-requested-hook-directory-does-not-exist 2019-07-29 16:39:08 +02:00
container_internal_linux.go rootless: Rearrange setup of rootless containers 2019-07-30 23:28:52 +00:00
container_internal_test.go Potentially breaking: Make hooks sort order locale-independent 2019-04-09 21:08:44 +02:00
container_internal_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_log_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_log_unsupported.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_top_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_top_unsupported.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_unsupported.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
diff.go Add function to get a filtered tarstream diff 2019-07-11 14:43:34 +02:00
events.go get last container event 2019-07-07 08:54:20 -05:00
healthcheck.go Implement conmon exec 2019-07-22 15:57:23 -04:00
healthcheck_linux.go golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
healthcheck_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
in_memory_state.go remove libpod from main 2019-06-25 13:51:24 -05:00
info.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
kube.go golangci-lint round #3 2019-07-21 14:22:39 -05:00
mounts_linux.go set root propagation based on volume properties 2018-11-26 13:55:02 +01:00
networking_linux.go rootless: Rearrange setup of rootless containers 2019-07-30 23:28:52 +00:00
networking_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
oci.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_linux.go golangci-lint cleanup 2019-07-23 10:13:04 -05:00
oci_attach_linux_cgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_linux_nocgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_unsupported.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_internal_linux.go rootless: Rearrange setup of rootless containers 2019-07-30 23:28:52 +00:00
oci_linux.go rootless: Rearrange setup of rootless containers 2019-07-30 23:28:52 +00:00
oci_unsupported.go Implement conmon exec 2019-07-22 15:57:23 -04:00
options.go podman: support --userns=ns|container 2019-07-25 23:04:55 +02:00
pod.go remove libpod from main 2019-06-25 13:51:24 -05:00
pod_api.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
pod_internal.go remove libpod from main 2019-06-25 13:51:24 -05:00
pod_top_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
pod_top_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime.go Update libpod.conf to be NixOS friendly 2019-07-30 12:59:11 +02:00
runtime_cstorage.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_ctr.go golangci-lint round #3 2019-07-21 14:22:39 -05:00
runtime_img.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_img_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_migrate.go code cleanup 2019-07-08 09:18:11 -05:00
runtime_migrate_unsupported.go system: migrate stops the pause process 2019-05-17 20:48:25 +02:00
runtime_pod.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_pod_infra_linux.go rootless: Rearrange setup of rootless containers 2019-07-30 23:28:52 +00:00
runtime_pod_linux.go golangci-lint round #3 2019-07-21 14:22:39 -05:00
runtime_pod_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_renumber.go Add System event type and renumber, refresh events 2019-04-25 16:23:09 -04:00
runtime_volume.go When retrieving volumes, only use exact names 2019-07-24 22:30:16 -04:00
runtime_volume_linux.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_volume_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
state.go Switch Libpod over to new explicit named volumes 2019-04-04 12:26:29 -04:00
state_test.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
stats.go Build fix for 32-bit systems. 2019-07-30 12:25:36 -04:00
stats_config.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
stats_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
storage.go remove libpod from main 2019-06-25 13:51:24 -05:00
util.go code cleanup 2019-07-08 09:18:11 -05:00
util_linux.go stats: fix cgroup path for rootless containers 2019-06-26 13:17:06 +02:00
util_test.go Stage3 Image Library 2018-03-14 20:21:31 +00:00
util_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
volume.go Purge all use of easyjson and ffjson in libpod 2019-06-13 11:03:20 -04:00
volume_internal.go Remove locks from volumes 2019-02-21 10:51:42 -05:00