зеркало из https://github.com/microsoft/docker.git
816 B
816 B
goals
- small and simple - line count is not everything but less code is better
- clean lines between what we do in the pkg
- provide primitives for working with namespaces not cater to every option
- extend via configuration not by features - host networking, no networking, veth network can be accomplished via adjusting the container.json, nothing to do with code
tasks
- proper tty for a new process in an existing container
- use exec or raw syscalls for new process in existing container
- setup proper user in namespace if specified
- implement hook or clean interface for cgroups
- example configs for different setups (host networking, boot init)
- improve pkg documentation with comments
- testing - this is hard in a low level pkg but we could do some, maybe
- pivot root
- selinux
- apparmor