delta/docker.git/runtime/execdriver, branch release-0.10 github.com: dotcloud/docker.git Backup current docker apparmor profile and replace it with the new one 2014-04-08T18:09:31+00:00 Guillaume J. Charmes guillaume@charmes.net 2014-04-08T17:10:51+00:00 4f828d67f00449182eaada50dfba37e00f8f01ef Docker-DCO-1.1-Signed-off-by: Guillaume J. Charmes <guillaume@charmes.net> (github: creack) 
Docker-DCO-1.1-Signed-off-by: Guillaume J. Charmes <guillaume@charmes.net> (github: creack)
Fix lxc label handleing 2014-04-02T16:52:49+00:00 Michael Crosby michael@crosbymichael.com 2014-04-02T16:52:49+00:00 94233a204f82f857536c16f36f94d3a8ff0069dd This also improves the logic around formatting the labels for selinux Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) 
This also improves the logic around formatting the labels for selinux
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
Merge branch 'selinux' of https://github.com/rhatdan/docker into rhatdan-selinux 2014-04-02T16:11:35+00:00 Michael Crosby michael@crosbymichael.com 2014-04-02T16:11:35+00:00 6e7a93628b924d176a9caa1164db7a1526dbe573 Conflicts: pkg/selinux/selinux.go runtime/execdriver/lxc/lxc_template.go Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) 
Conflicts:
	pkg/selinux/selinux.go
	runtime/execdriver/lxc/lxc_template.go

Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
Fix SELinux issue with missing Contexts in lxc execdriver 2014-04-03T13:45:40+00:00 Dan Walsh dwalsh@redhat.com 2014-04-02T17:56:30+00:00 ca4224762b5fe9a319b6c1724ee16d1552403269 There is a bug in the SELinux patch for the lxc execdriver, that causes lxc containers to blow up whether or not SELinux is enabled. Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan) 
There is a bug in the SELinux patch for the lxc execdriver, that
causes lxc containers to blow up whether or not SELinux is enabled.

Docker-DCO-1.1-Signed-off-by: Dan Walsh <dwalsh@redhat.com> (github: rhatdan)
Fix configuration test for MKNOD 2014-04-02T13:07:11+00:00 Michael Crosby michael@crosbymichael.com 2014-04-02T13:07:11+00:00 f80fd5da09013d7cd25a0f246ffffd7b6c064073 Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) 
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
Allow non-privileged containers to create device nodes. 2014-04-03T18:44:13+00:00 Kevin Wallace kevin@pentabarf.net 2013-12-01T23:27:24+00:00 c94111b61988ad32d87f99d4421cbcde018c3fb4 Such nodes could already be created by importing a tarball to a container; now they can be created from within the container itself. This gives non-privileged containers the mknod kernel capability, and modifies their cgroup settings to allow creation of *any* node, not just whitelisted ones. Use of such nodes is still controlled by the existing cgroup whitelist. Docker-DCO-1.1-Signed-off-by: Kevin Wallace <kevin@pentabarf.net> (github: kevinwallace) 
Such nodes could already be created by importing a tarball to a container; now
they can be created from within the container itself.

This gives non-privileged containers the mknod kernel capability, and modifies
their cgroup settings to allow creation of *any* node, not just whitelisted
ones.  Use of such nodes is still controlled by the existing cgroup whitelist.

Docker-DCO-1.1-Signed-off-by: Kevin Wallace <kevin@pentabarf.net> (github: kevinwallace)
Ensure a reliable way to kill ghost containers on reboot 2014-04-01T07:11:41+00:00 Michael Crosby michael@crosbymichael.com 2014-03-26T06:48:16+00:00 5bb82f6313d7f789783ffac854be85a44a56617e Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) 
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
Update imports to be consistent 2014-04-01T07:07:42+00:00 Michael Crosby michael@crosbymichael.com 2014-04-01T07:07:42+00:00 40c6d00c97c737d9d3827f159518007803affcc7 Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) 
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael)
cgroups: Add systemd implementation of cgroups 2014-03-27T21:44:31+00:00 Alexander Larsson alexl@redhat.com 2014-02-21T13:35:43+00:00 6c7835050e53b733181ddfca6152c358fd625400 This implements cgroup.Apply() using the systemd apis. We create a transient unit called "docker-$id.scope" that contains the container processes. We also have a way to set unit specific properties, currently only defining the Slice to put the scope in. Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson) 
This implements cgroup.Apply() using the systemd apis.
We create a transient unit called "docker-$id.scope" that contains
the container processes. We also have a way to set unit specific
properties, currently only defining the Slice to put the
scope in.

Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson)
Add --opt arguments for drivers 2014-03-27T20:47:47+00:00 Alexander Larsson alexl@redhat.com 2014-03-13T16:03:09+00:00 7a3070a6000963d12be9dcd2698d911b848a33b6 In order to handle special configuration for different drivers we make the Config field a map to string array. This lets us use it for lxc, by using the "lxc" key for those, and we can later extend it easily for other backend-specific options. Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson) 
In order to handle special configuration for different drivers we
make the Config field a map to string array. This lets
us use it for lxc, by using the "lxc" key for those, and we can
later extend it easily for other backend-specific options.

Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com> (github: alexlarsson)