spiegel_podman/pkg/spec
Giuseppe Scrivano 0b57e77d7c
libpod: support for cgroup namespace
allow a container to run in a new cgroup namespace.

When running in a new cgroup namespace, the current cgroup appears to
be the root, so that there is no way for the container to access
cgroups outside of its own subtree.

By default it uses --cgroup=host to keep the previous behavior.

To create a new namespace, --cgroup=private must be provided.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2019-07-18 10:32:25 +02:00
..
config_linux.go spec: move cgo stuff to their own file 2019-07-02 16:41:03 +02:00
config_linux_cgo.go spec: move cgo stuff to their own file 2019-07-02 16:41:03 +02:00
config_linux_nocgo.go spec: move cgo stuff to their own file 2019-07-02 16:41:03 +02:00
config_unsupported.go Add darwin support for remote-client 2019-01-11 11:30:28 -06:00
containerconfig.go remove libpod from main 2019-06-25 13:51:24 -05:00
createconfig.go libpod: support for cgroup namespace 2019-07-18 10:32:25 +02:00
parse.go Invalid index for array 2018-12-21 09:25:25 -05:00
ports.go Spell check strings and comments 2018-05-25 08:45:15 +00:00
spec.go libpod: support for cgroup namespace 2019-07-18 10:32:25 +02:00
spec_test.go Migrate unit tests from cmd/podman into pkg/spec 2019-05-01 10:19:05 -04:00
storage.go fix bug convert volume host path to absolute 2019-07-10 10:26:57 -04:00
storage_test.go Use EqualValues instead of reflect equality 2019-05-01 10:19:05 -04:00