spiegel_podman/pkg
Gabi Beyer 80dcd4bebc rootless: Rearrange setup of rootless containers
In order to run Podman with VM-based runtimes unprivileged, the
network must be set up prior to the container creation. Therefore
this commit modifies Podman to run rootless containers by:
  1. create a network namespace
  2. pass the netns persistent mount path to the slirp4netns
     to create the tap inferface
  3. pass the netns path to the OCI spec, so the runtime can
     enter the netns

Closes #2897

Signed-off-by: Gabi Beyer <gabrielle.n.beyer@intel.com>
2019-07-30 23:28:52 +00:00
..
adapter pods: do not to join a userns if there is not any 2019-07-25 23:04:54 +02:00
annotations Update cri-o annotations 2019-04-01 11:10:54 +02:00
apparmor golangci-lint round #3 2019-07-21 14:22:39 -05:00
cgroups golangci-lint round #3 2019-07-21 14:22:39 -05:00
channelwriter account for varlink calls that dont use more 2019-07-10 08:50:05 -05:00
criu Add helper function to read out CRIU version 2018-10-23 12:52:03 +02:00
ctime Re-add int64 casts for ctime 2019-07-23 15:43:40 -04:00
errorhandling first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
firewall golangci-lint round #3 2019-07-21 14:22:39 -05:00
hooks Improved hooks monitoring 2019-07-25 09:52:45 -04:00
inspect Begin to break up pkg/inspect 2019-06-03 15:54:53 -04:00
kubeutils Remove dependency on kubernetes 2018-03-27 21:55:33 +00:00
logs first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
lookup pkg/lookup: Return ID-only pointers on ErrNo*Entries 2018-12-04 14:46:43 -08:00
namespaces podman: support --userns=ns|container 2019-07-25 23:04:55 +02:00
netns rootless: Rearrange setup of rootless containers 2019-07-30 23:28:52 +00:00
registrar Update registrar unit tests to match them of cri-o 2019-04-04 08:53:32 +02:00
registries Use the logical registry location instead of the physical one in (podman info) 2019-06-14 15:46:17 +02:00
resolvconf Use host's resolv.conf if no network namespace enabled 2018-11-27 15:28:09 -05:00
rootless golangci-lint round #3 2019-07-21 14:22:39 -05:00
spec rootless: Rearrange setup of rootless containers 2019-07-30 23:28:52 +00:00
sysinfo golangci-lint round #3 2019-07-21 14:22:39 -05:00
systemdgen Do not hardcode podman binary location in generate systemd. 2019-07-07 11:20:41 +03:00
tracing trivial cleanups from golang 2019-07-03 15:41:33 -05:00
trust trivial cleanups from golang 2019-07-03 15:41:33 -05:00
util golangci-lint phase 4 2019-07-22 15:44:04 -05:00
varlinkapi refactor to reduce duplicated error parsing 2019-07-23 16:49:04 -04:00