spiegel_podman/pkg
Gabi Beyer 5813c8246e rootless: Rearrange setup of rootless containers
In order to run Podman with VM-based runtimes unprivileged, the
network must be set up prior to the container creation. Therefore
this commit modifies Podman to run rootless containers by:
  1. create a network namespace
  2. pass the netns persistent mount path to the slirp4netns
     to create the tap inferface
  3. pass the netns path to the OCI spec, so the runtime can
     enter the netns

Closes #2897

Signed-off-by: Gabi Beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00
..
adapter support non-standard ssh port for remote-client 2019-09-17 13:42:02 -05:00
annotations Add ContainerManager annotation to created containers 2019-09-10 09:37:14 +02:00
apparmor golangci-lint round #3 2019-07-21 14:22:39 -05:00
cgroups rootless: automatically create a systemd scope 2019-09-12 08:35:26 +02:00
channelwriter account for varlink calls that dont use more 2019-07-10 08:50:05 -05:00
criu Add helper function to read out CRIU version 2018-10-23 12:52:03 +02:00
ctime Re-add int64 casts for ctime 2019-07-23 15:43:40 -04:00
errorhandling first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
hooks Running Podman with a nonexistent hooks dir is nonfatal 2019-08-13 15:05:42 -04:00
inspect Begin to break up pkg/inspect 2019-06-03 15:54:53 -04:00
kubeutils Remove dependency on kubernetes 2018-03-27 21:55:33 +00:00
logs first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
lookup execuser: look at the source for /etc/{passwd,group} overrides 2019-09-21 22:11:09 +02:00
namespaces namespaces: fix Container() call 2019-08-07 13:11:08 -04:00
netns rootless: Rearrange setup of rootless containers 2019-09-24 11:01:28 +02:00
network enhance podman network rm 2019-09-12 14:03:52 -05:00
registrar Update registrar unit tests to match them of cri-o 2019-04-04 08:53:32 +02:00
registries Use the logical registry location instead of the physical one in (podman info) 2019-06-14 15:46:17 +02:00
resolvconf Use host's resolv.conf if no network namespace enabled 2018-11-27 15:28:09 -05:00
rootless pkg/util: use rootless function to read additional users 2019-09-03 14:38:08 +02:00
spec rootless: Rearrange setup of rootless containers 2019-09-24 11:01:28 +02:00
sysinfo golangci-lint round #3 2019-07-21 14:22:39 -05:00
systemdgen generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
tracing trivial cleanups from golang 2019-07-03 15:41:33 -05:00
trust trivial cleanups from golang 2019-07-03 15:41:33 -05:00
util Podman-remote run should wait for exit code 2019-09-12 16:20:01 -04:00
varlinkapi Merge pull request #4006 from rhatdan/rootless 2019-09-13 18:44:45 +02:00