1025e577f0
[warden] Add privileged option to run/spawn
...
This adds an options has that may be passed to spawn. The initial
option allowed is the boolean "privileged," which, if supplied,
will cause the command to be run as root.
Change-Id: I7f90553e7e3092b17d9326bb4d339c52d0a55035
2012-05-03 18:45:08 -07:00
710d4dc973
[warden] correct typo
...
s/clinet/client/
Change-Id: I7391c617a602e47487397235f0d098135cf38857
2012-04-19 20:31:36 -07:00
e4ecaee5e9
[warden] No panic on receiving invalid json
...
The warden daemon currently faints when it sees malformed json. This
change makes the daemon slightly more robust by disconnecting the
client when warden can't parse the request and keeps the warden daemon
running.
Test plan: pass unit tests
Change-Id: I90301efd86a18cda63db6483b9b89c7c0f454709
2012-04-19 20:16:27 -07:00
81d8a583dd
warden: Typo in README
...
Change-Id: Ia14683cc631873bd88409b771c236b907c20fb59
2012-04-10 16:38:50 -07:00
bf05bc7e2f
warden: Document "grace_time" option
...
Change-Id: Ic355c0fb628ec7f6bfaf767f6a9b5ad167a9982e
2012-04-10 15:33:19 -07:00
7e7ca22fbe
warden: Oxford comma
...
Change-Id: I1220f8bfb4f05c456f042cb1755a23ce3656667a
2012-04-10 15:25:15 -07:00
5351e51ec1
warden: Allow clients to specify the container's disk size
...
Change-Id: I1542fba9206de25c512e32f96367f32394638324
2012-04-10 15:20:17 -07:00
1a576bcd54
warden: Consistently wrap variables, quote strings
...
Change-Id: I100fcbb4f3d79e307e97c91637538b214e1fbf49
2012-04-10 13:06:43 -07:00
23d61a1d28
warden: Capitalization
...
Change-Id: I9bf099c1116326fcc8235c85ca01372105854b1e
2012-04-10 13:02:26 -07:00
9521f27282
warden: Remove docs on run-time disk limiting
...
Change-Id: I74485030d5ebbf6baa4e29c6d32ec98249dae9cb
2012-04-10 13:02:15 -07:00
8b3e62d210
warden: Add short "Getting Started" guide to README
...
Change-Id: Iec406cfaae88e5a016453a1c2cc9024840168967
2012-04-10 12:52:10 -07:00
16237b5c79
warden: Log when ready
...
Change-Id: If462897edeadc8b55a8a58b4ee39031b98880414
2012-04-10 12:51:16 -07:00
9f8eb3e15f
warden: Rewrite README
...
Change-Id: I3f46d12be635553e180c587a375ec17ffdadb944
2012-04-10 11:51:09 -07:00
ba08347468
warden: Prevent concurrent execution of net.sh
...
In some concurrent benchmarks `iptables` exited with a non-zero status
and the message `Resource not available` (which I assume can be traced
back to an EAGAIN in netlink I/O). Prevent this class of errors from
happening by not executing `iptables` concurrently.
Change-Id: I20b9cdd4397d79f16a1968b267b91a54b14cc6d3
2012-04-09 13:51:52 -07:00
94961ce1ab
warden: Include network in example config
...
Change-Id: I116b6e90d44d93292d4281ee9cf9744289f4e864
2012-04-09 13:51:52 -07:00
5d021d5cb9
warden: Wait for "running" event on container start
...
Change-Id: I695e88aaaf96e906f6a1a53f85a820d93f2b4010
2012-04-09 13:51:52 -07:00
ac5189f7a6
warden: Modify upstart definitions
...
This changes makes upstart run the jobs we need in a more predictable
order. Because we use console.log to probe whether SSH has already
started or not, we need to postpone starting rsyslog or it would capture
everything written to /dev/console to /var/log/syslog inside the
container. In addition, we want SSH to start when the virtual ethernet
interface has been configured (or it still wouldn't be reachable).
Change-Id: I20ec13e30eefa5e896797f5be17680ccacdbc0a4
2012-04-09 13:51:51 -07:00
051962cf55
warden: Import relevant upstart definitions
...
Change-Id: I0bc63c56c17de8d041473d49a0dbd62cf11efc95
2012-04-09 13:51:51 -07:00
510f6b33c3
warden: Include net.sh in start/stop
...
Change-Id: I82043874ee57e270227ba774bb42491145d2252c
2012-04-09 13:51:51 -07:00
77a4c99344
Merge "Convert 'info' exported host_ip container_ip from object to string"
2012-04-06 01:56:15 +00:00
7c2a514613
Convert 'info' exported host_ip container_ip from object to string
...
Change-Id: I65cde2c48bd1d67dddebc35e4e4c2cdaf36d4fa3
2012-03-30 23:47:47 +08:00
79314555a4
Merge "warden: Let SSH background itself after connecting"
2012-03-30 19:10:44 +00:00
4fcfb13b51
warden: Let SSH background itself after connecting
...
Change-Id: I6bfaf2d0bb8f31fcbd6b6bae65e851a914a008f5
2012-03-29 20:36:11 -07:00
10b9d31632
[warden] Accept 'yes' as answer to erasing base
...
Instead of just 'y|Y'
Change-Id: Ice597fac46a04f1913dcf05af03a13c92cd758e5
2012-03-29 18:05:30 -07:00
e2f81c7e19
[warden] Update NATS client
...
No actual change from beta 8 to 0.4.22 release, but beta 4 is no
longer on Rubygems
Change-Id: Ib73752611ac3ef701c7604b1e824266b221dd69d
2012-03-29 18:05:29 -07:00
97cd101709
[warden] Minor typo
...
Grammar police.
Change-Id: I3634f7366d0665acc21b878139d2eb01263b32a7
2012-03-29 18:05:29 -07:00
acf6184990
[warden] Detect Proxy Used By Host APT
...
If the host uses a caching proxy for APT, try using that.
Change-Id: I07059e0c6eb6573a0766299adc0443b15a3f8f6a
2012-03-29 18:05:29 -07:00
f86f081a9a
warden: Rename for consistency
...
Change-Id: I9f61ab52490a4fd0e54b058c2a9b9d8b577b589b
2012-03-29 15:37:35 -07:00
dcea41cd0e
warden: Make SSH detection more robust
...
After enabling rsyslog upstart appeared to stop emitting the "running"
event for SSH. Instead, grep for every target state and see if "spawned"
is one of them.
Change-Id: I4535e7ef24d2eb67e17e50f3df7ef7b512814476
2012-03-29 15:37:35 -07:00
304975c7d8
warden: rsyslog is required by some packages
...
Change-Id: Ib6f5e63a707e6e3c18824494291086b7eb77792e
2012-03-29 15:37:35 -07:00
cb798d8624
warden: Disable AppArmor if possible
...
If AppArmor is configured on the host, it may interfere with processes
running inside containers, as it isn't aware that these processes have a
different root file system. For instance: files these processes try to
access appear to AppArmor as relative to the hosts root file system, and
may by policy be therefore denied.
Change-Id: I70d5acfccebdd1d4cc4b6e86a806b34e503f369d
2012-03-29 15:37:35 -07:00
5337101d95
warden: Use en_US.UTF-8 for default locale
...
Change-Id: Icce01ad1c10f2eff9e44f49c208f4363f199a984
2012-03-29 15:37:35 -07:00
fa934485b8
warden: Move bind mount logic
...
Change-Id: If66fb43f02ea80f6aa52d5efed604ff1584b9cf4
2012-03-29 15:37:35 -07:00
60f880dacc
warden: Allow network setup without ALLOW/DENY
...
Change-Id: I3355848cdb7d1c3a6c41bfb26da21ab64121426c
2012-03-29 15:37:35 -07:00
b250eb30a6
warden: Create loop devices as needed
...
Change-Id: I4a2777bc79dc9981765f51eb71559a8053960e92
2012-03-29 15:37:35 -07:00
489f9f30d6
warden: Move Linux specific setup to root/linux/setup.sh
...
Change-Id: I3f7261041e4066a3a964a4782d260c59a30fb805
2012-03-29 15:37:35 -07:00
919b9f9811
warden: Include IP addresses in INFO output
...
Change-Id: If34301257375fb48c2249a7e73801d259d0ccb4a
2012-03-29 15:37:35 -07:00
9138958780
warden: Document grace time in example configuration
...
Change-Id: I0eba72d78d89c1b03300c044aa2c50f1e67d9776
2012-03-29 15:37:35 -07:00
3af322a694
warden: Use string keys in unchecked hashes
...
Change-Id: I4056bea0bcbe673d030747ba25b3f168b81769ad
2012-03-29 15:37:35 -07:00
abfa27cb34
warden: Sanitize container grace time
...
Change-Id: Ice6ed09239f9ff7dfc82aac17c039bd5e933ff55
2012-03-29 15:37:35 -07:00
15c611fd1a
warden: Consistently use symbols to access sanitized config
...
Change-Id: I5da431394f5510c81ad3923e179ebce8cd8b71b1
2012-03-28 17:18:30 -07:00
2f25b00cde
warden: Pass container configuration to #initialize
...
Change-Id: Ie6cc1583199709d1b6d02528bbc409103d1d7ea6
2012-03-28 17:18:30 -07:00
d61441fa09
warden: Grow memory limit in OOM test to fix false positive
...
Change-Id: I4a13464ecb2c2ea99b1ea5928f6e74e4784e215e
2012-03-28 17:18:30 -07:00
943643b83c
warden: Avoid lsb_release when we can
...
Directly sourcing /etc/lsb-release in a subshell takes less than 2
milliseconds whereas lsb-release -cs usually takes more than 29 ms.
Change-Id: Ibf7586291519bdefd4c04b10f962bb1b99638136
2012-03-28 17:18:30 -07:00
43ad1c6c4c
warden: documentation for bind_mounts.
...
Change-Id: I65f4bb36403f39bd7cd21d0da888636cd9b30201
2012-03-28 10:43:45 -07:00
8301f9c090
warden: include build essentials in base disk image.
...
Change-Id: Id3a0a225e07f0e8327b644f215aec1906880d8a1
2012-03-28 10:41:14 -07:00
486717c7a8
Merge "manually squashed merge of release_64_fixes branch (w/conflicts)"
2012-04-03 19:10:34 +00:00
54f40e2c51
manually squashed merge of release_64_fixes branch (w/conflicts)
...
This also contains a race condition fix for the stager
unit test.
Change-Id: Id698909dfb0c26c5fde7d5cef52cce63230f7ad8
2012-04-03 11:43:57 -07:00
ffb4d65f43
Merge "[warden] Proxy detection compatibility fix"
2012-04-03 01:03:08 +00:00
d42d96c775
[warden] Proxy detection compatibility fix
...
The '-v' test in Bash is too new (requires Bash 4.2+), revert to old
trick of testing whether a variable is unset.
Change-Id: I2628849f35ab646542a63bcb540beabbf6137149
2012-04-02 17:58:22 -07:00
mpage
Jesse Zhang
Pieter Noordhuis
Cliff Wang
Tal Garfinkel
Patrick Bozeman