docker-cli

Files

Liron Levin e578be78a3 Run privileged containers when userns are specified

Following #19995 and #17409 this PR enables skipping userns re-mapping
when creating a container (or when executing a command). Thus, enabling
privileged containers running side by side with userns remapped
containers.

The feature is enabled by specifying ```--userns:host```, which will not
remapped the user if userns are applied. If this flag is not specified,
the existing behavior (which blocks specific privileged operation)
remains.

Signed-off-by: Liron Levin <liron@twistlock.com>
Upstream-commit: 6993e891d10c760d22e0ea3d455f13858cd0de46
Component: engine

2016-03-14 17:09:25 +02:00

events

Compare event nanoseconds properly to filter since a specific date.

2016-03-08 17:07:58 -05:00

exec

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

execdriver

Merge pull request #20478 from msabansal/HNSIntegration

2016-03-10 13:33:04 -08:00

graphdriver

Make sure we call every graph init with the same root path.

2016-03-11 17:15:55 -05:00

links

Replace usage of pkg/nat with go-connections/nat.

2015-12-22 13:31:46 -05:00

logger

Provide basic string manupilation functions for template executions.

2016-03-09 19:37:12 -05:00

network

Modify import paths to point to the new engine-api package.

2016-01-06 19:48:59 -05:00

archive_unix.go

Remove package daemonbuilder.

2016-02-01 09:57:38 -08:00

archive_windows.go

Remove package daemonbuilder.

2016-02-01 09:57:38 -08:00

archive.go

Fix copy chown settings to not default to real root

2016-02-18 14:44:13 -08:00

attach.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

changes.go

Rename Daemon.Get to Daemon.GetContainer.

2015-12-11 12:39:28 -05:00

commit.go

Vendor engine-api to 70d266e96080e3c3d63c55a4d8659e00ac1f7e6c

2016-02-29 19:28:37 +08:00

config_experimental.go

Move userns support out of experimental into master

2016-01-08 15:06:22 -05:00

config_stub.go

Add user namespace enable flag --userns-remap in experimental build

2015-10-09 20:50:05 -04:00

config_test.go

Verify that the configuration keys in the file are valid.

2016-01-21 16:56:12 -05:00

config_unix.go

Windows: Add support for named pipe protocol

2016-02-01 19:46:30 -08:00

config_windows.go

Windows libnetwork integration

2016-03-09 20:33:21 -08:00

config.go

Move registry service options to the daemon configuration.

2016-03-10 11:53:11 -05:00

container_operations_unix.go

Run privileged containers when userns are specified

2016-03-14 17:09:25 +02:00

container_operations_windows.go

Windows libnetwork integration

2016-03-09 20:33:21 -08:00

container_operations.go

Windows libnetwork integration

2016-03-09 20:33:21 -08:00

create_unix.go

Ensure WORKDIR is created with remapped root ownership

2016-03-08 11:58:55 -05:00

create_windows.go

Allow external volume drivers to host anonymous volumes and copy existing data from image.

2016-01-08 15:06:42 -05:00

create.go

validate log-opt when creating containers AGAIN

2016-03-02 20:30:26 +08:00

daemon_experimental.go

Move userns support out of experimental into master

2016-01-08 15:06:22 -05:00

daemon_linux_test.go

Do not try to cleanupMounts if daemon.repository is empty

2015-09-29 11:30:18 +08:00

daemon_linux.go

Clean up container rootf mounts on daemon start fixes #19679

2016-02-03 20:52:32 -05:00

daemon_stub.go

Move userns support out of experimental into master

2016-01-08 15:06:22 -05:00

daemon_test.go

Fix configuration reloading

2016-02-24 21:12:14 -05:00

daemon_unix_test.go

Fix some typos in comments and strings

2016-02-22 20:27:15 +01:00

daemon_unix.go

Run privileged containers when userns are specified

2016-03-14 17:09:25 +02:00

daemon_unsupported.go

Add platformSupported flag to enable daemon mode by platform.

2015-08-07 09:45:24 -07:00

daemon_windows.go

Windows libnetwork integration

2016-03-09 20:33:21 -08:00

daemon.go

Merge pull request #20970 from dmcgowan/login-oauth

2016-03-14 15:49:44 +01:00

debugtrap_unix.go

Windows: Win32 event for sigusr1 linux equivalence

2015-07-06 18:58:53 -07:00

debugtrap_unsupported.go

Windows: Win32 event for sigusr1 linux equivalence

2015-07-06 18:58:53 -07:00

debugtrap_windows.go

Fix typos found across repository

2015-12-13 18:04:12 +02:00

delete_test.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

delete.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

discovery_test.go

Fix minor vet warnings

2016-02-03 10:43:01 -08:00

discovery.go

fix typos

2016-03-11 23:22:16 +08:00

errors.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

events_test.go

Add the possibility to log event with specific attributes

2016-01-17 12:14:01 +01:00

events.go

Add the possibility to log event with specific attributes

2016-01-17 12:14:01 +01:00

exec_unix.go

Modify import paths to point to the new engine-api package.

2016-01-06 19:48:59 -05:00

exec_windows.go

Modify import paths to point to the new engine-api package.

2016-01-06 19:48:59 -05:00

exec.go

Vendor engine-api to 70d266e96080e3c3d63c55a4d8659e00ac1f7e6c

2016-02-29 19:28:37 +08:00

export.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

image_delete.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

images.go

Fix image filter

2016-01-14 08:17:40 +00:00

import.go

Fix docker import on compressed data

2016-02-16 11:19:23 -08:00

info.go

Move registry service options to the daemon configuration.

2016-03-10 11:53:11 -05:00

inspect_unix.go

Remove daemon dependency from api/server.

2016-02-10 15:16:59 -05:00

inspect_windows.go

Remove daemon dependency from api/server.

2016-02-10 15:16:59 -05:00

inspect.go

Remove daemon dependency from api/server.

2016-02-10 15:16:59 -05:00

kill.go

Do not wait for container on stop if the process doesn't exist.

2016-03-04 16:00:58 -05:00

links_test.go

Extract container store from the daemon.

2016-01-19 13:21:41 -05:00

links.go

Add migration from sqlite links back to hostConfig

2016-01-11 11:31:29 -05:00

list_unix.go

Move Container to its own package.

2015-12-03 17:39:49 +01:00

list_windows.go

Move Container to its own package.

2015-12-03 17:39:49 +01:00

list.go

Enhancement of docker ps before and since filters

2016-02-25 16:58:31 +08:00

logdrivers_linux.go

daemon/logger: Add logging driver for Google Cloud Logging

2016-03-01 08:06:10 -08:00

logdrivers_windows.go

Windows: Add ETW logging driver plug-in

2016-02-16 13:24:49 -08:00

logs.go

validate log-opt when creating containers AGAIN

2016-03-02 20:30:26 +08:00

mounts.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

network.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

pause.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

README.md

Docs: remove networkdriver from README.md in daemon

2015-08-22 10:09:07 +08:00

rename.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

resize.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

restart.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

selinux_linux.go

Rename daemon/utils_*.go to selinux

2015-11-12 15:48:41 -08:00

selinux_unsupported.go

Rename daemon/utils_*.go to selinux

2015-11-12 15:48:41 -08:00

start.go

Ensure WORKDIR is created with remapped root ownership

2016-03-08 11:58:55 -05:00

stats_collector_unix.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

stats_collector_windows.go

Move Container to its own package.

2015-12-03 17:39:49 +01:00

stats_freebsd.go

Modify import paths to point to the new engine-api package.

2016-01-06 19:48:59 -05:00

stats_linux.go

pids limit support

2016-03-08 07:55:01 -08:00

stats_windows.go

Modify import paths to point to the new engine-api package.

2016-01-06 19:48:59 -05:00

stats.go

Move stream flushes to backend

2016-02-09 14:25:02 -05:00

stop.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

top_unix.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

top_windows.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

unpause.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

update.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

volumes_unit_test.go

reorder imports with goimports

2015-12-16 16:50:25 +01:00

volumes_unix.go

Remove duplicated lazy volume initialization.

2016-01-13 11:22:31 -05:00

volumes_windows.go

Remove static errors from errors package.

2016-02-26 15:49:09 -05:00

volumes.go

Do not relabel if user did not request it for non local volumes

2016-03-01 17:09:42 -05:00

wait.go

Rename Daemon.Get to Daemon.GetContainer.

2015-12-11 12:39:28 -05:00

README.md

This directory contains code pertaining to running containers and storing images

Code pertaining to running containers:

execdriver

Code pertaining to storing images:

graphdriver