bundlerules

Documentation

Index

• Variables
• func UnprivilegedMountFlagsGetter(path string) ([]string, error)
• type Base
  • func (r Base) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type CGroupPath
  • func (r CGroupPath) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type Env
  • func (r Env) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type Hostname
  • func (r Hostname) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type KernelParameter
  • func NewKernelParameter(sysctl Sysctl, key string, value uint32) *KernelParameter
  • func (r *KernelParameter) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type Limits
  • func (l Limits) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type MkdirChowner
  • func (m MkdirChowner) MkdirAs(rootFSPathFile string, uid, gid int, mode os.FileMode, recreate bool, ...) error
• type Mounts
  • func NewMounts(logger lager.Logger, mountOptionsGetter rundmc.MountOptionsGetter) Mounts
  • func (b Mounts) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type Namespaces
  • func (n Namespaces) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type RootFS
  • func (r RootFS) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)
• type Sysctl
• type Windows
  • func (w Windows) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

Variables

var (
	CpuPeriod   uint64 = 100000
	MinCpuQuota uint64 = 1000
)

Functions

func UnprivilegedMountFlagsGetter

func UnprivilegedMountFlagsGetter(path string) ([]string, error)

This comes from https://github.com/cyphar/docker/blob/c0f883fdeeb2480970fb48fbcbc2a842aa5a90e8/daemon/oci_linux.go#L473-L503

Types

type Base

type Base struct {
	PrivilegedBase   goci.Bndl
	UnprivilegedBase goci.Bndl
}

func (Base) Apply

func (r Base) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type CGroupPath

type CGroupPath struct {
	Path string
}

func (CGroupPath) Apply

func (r CGroupPath) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type Env

type Env struct {
}

func (Env) Apply

func (r Env) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type Hostname

type Hostname struct {
}

func (Hostname) Apply

func (r Hostname) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type KernelParameter

type KernelParameter struct {
	// contains filtered or unexported fields
}

func NewKernelParameter

func NewKernelParameter(sysctl Sysctl, key string, value uint32) *KernelParameter

func (*KernelParameter) Apply

func (r *KernelParameter) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type Limits

type Limits struct {
	CpuQuotaPerShare uint64
	BlockIOWeight    uint16
	DisableSwapLimit bool
}

func (Limits) Apply

func (l Limits) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type MkdirChowner

type MkdirChowner struct {
	Command       func(rootFSPathFile string, uid, gid int, mode os.FileMode, recreate bool, paths ...string) *exec.Cmd
	CommandRunner commandrunner.CommandRunner
}

func (MkdirChowner) MkdirAs

func (m MkdirChowner) MkdirAs(rootFSPathFile string, uid, gid int, mode os.FileMode, recreate bool, paths ...string) error

type Mounts

type Mounts struct {
	// contains filtered or unexported fields
}

func NewMounts

func NewMounts(logger lager.Logger, mountOptionsGetter rundmc.MountOptionsGetter) Mounts

func (Mounts) Apply

func (b Mounts) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type Namespaces

type Namespaces struct{}

func (Namespaces) Apply

func (n Namespaces) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type RootFS

type RootFS struct {
}

func (RootFS) Apply

func (r RootFS) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)

type Sysctl

type Sysctl interface {
	Get(key string) (uint32, error)
}

type Windows

type Windows struct{}

func (Windows) Apply

func (w Windows) Apply(bndl goci.Bndl, spec spec.DesiredContainerSpec) (goci.Bndl, error)