Documentation
¶
Overview ¶
Package boot loads the kernel and runs a container.
Index ¶
- Constants
- Variables
- func ControlSocketAddr(id string) string
- type Args
- type CPU
- type CPUUsage
- type CreateArgs
- type CreateLinksAndRoutesArgs
- type DefaultRoute
- type Event
- type EventOut
- type FDBasedLink
- type IPWithPrefix
- type Loader
- type LoopbackLink
- type Memory
- type MemoryEntry
- type Neighbor
- type Network
- type Pids
- type RestoreOpts
- type Route
- type SignalArgs
- type SignalDeliveryMode
- type StartArgs
- type Stats
- type WaitPIDArgs
Constants ¶
const ( // ContMgrCheckpoint checkpoints a container. ContMgrCheckpoint = "containerManager.Checkpoint" // ContMgrCreateSubcontainer creates a sub-container. ContMgrCreateSubcontainer = "containerManager.CreateSubcontainer" // ContMgrDestroySubcontainer is used to stop a sub-container and free all // associated resources in the sandbox. ContMgrDestroySubcontainer = "containerManager.DestroySubcontainer" // ContMgrEvent gets stats about the container used by "runsc events". ContMgrEvent = "containerManager.Event" // ContMgrExecuteAsync executes a command in a container. ContMgrExecuteAsync = "containerManager.ExecuteAsync" // ContMgrProcesses lists processes running in a container. ContMgrProcesses = "containerManager.Processes" // ContMgrRestore restores a container from a statefile. ContMgrRestore = "containerManager.Restore" // ContMgrSignal sends a signal to a container. ContMgrSignal = "containerManager.Signal" // ContMgrStartSubcontainer starts a sub-container inside a running sandbox. ContMgrStartSubcontainer = "containerManager.StartSubcontainer" // ContMgrWait waits on the init process of the container and returns its // ExitStatus. ContMgrWait = "containerManager.Wait" // ContMgrWaitPID waits on a process with a certain PID in the sandbox and // return its ExitStatus. ContMgrWaitPID = "containerManager.WaitPID" // ContMgrRootContainerStart starts a new sandbox with a root container. ContMgrRootContainerStart = "containerManager.StartRoot" )
const ( // NetworkCreateLinksAndRoutes creates links and routes in a network stack. NetworkCreateLinksAndRoutes = "Network.CreateLinksAndRoutes" // DebugStacks collects sandbox stacks for debugging. DebugStacks = "debug.Stacks" )
const ( ProfileCPU = "Profile.CPU" ProfileHeap = "Profile.Heap" ProfileBlock = "Profile.Block" ProfileMutex = "Profile.Mutex" ProfileTrace = "Profile.Trace" )
Profiling related commands (see pprof.go for more details).
const ( LifecyclePause = "Lifecycle.Pause" LifecycleResume = "Lifecycle.Resume" )
Lifecycle related commands (see lifecycle.go for more details).
const ( UsageCollect = "Usage.Collect" UsageUsageFD = "Usage.UsageFD" UsageReduce = "Usage.Reduce" )
Usage related commands (see usage.go for more details).
const (
EventsAttachDebugEmitter = "Events.AttachDebugEmitter"
)
Events related commands (see events.go for more details).
const (
FsCat = "Fs.Cat"
)
Filesystem related commands (see fs.go for more details).
const (
LoggingChange = "Logging.Change"
)
Logging related commands (see logging.go for more details).
const (
// MountPrefix is the annotation prefix for mount hints.
MountPrefix = "dev.gvisor.spec.mount."
)
Variables ¶
var ( // DefaultLoopbackLink contains IP addresses and routes of "127.0.0.1/8" and // "::1/8" on "lo" interface. DefaultLoopbackLink = LoopbackLink{ Name: "lo", Addresses: []IPWithPrefix{ {Address: net.IP("\x7f\x00\x00\x01"), PrefixLen: 8}, {Address: net.IPv6loopback, PrefixLen: 128}, }, Routes: []Route{ { Destination: net.IPNet{ IP: net.IPv4(0x7f, 0, 0, 0), Mask: net.IPv4Mask(0xff, 0, 0, 0), }, }, { Destination: net.IPNet{ IP: net.IPv6loopback, Mask: net.IPMask(strings.Repeat("\xff", net.IPv6len)), }, }, }, } )
Functions ¶
func ControlSocketAddr ¶
ControlSocketAddr generates an abstract unix socket name for the given ID.
Types ¶
type Args ¶
type Args struct { // Id is the sandbox ID. ID string // Spec is the sandbox specification. Spec *specs.Spec // Conf is the system configuration. Conf *config.Config // ControllerFD is the FD to the URPC controller. The Loader takes ownership // of this FD and may close it at any time. ControllerFD int // Device is an optional argument that is passed to the platform. The Loader // takes ownership of this file and may close it at any time. Device *os.File // GoferFDs is an array of FDs used to connect with the Gofer. The Loader // takes ownership of these FDs and may close them at any time. GoferFDs []int // StdioFDs is the stdio for the application. The Loader takes ownership of // these FDs and may close them at any time. StdioFDs []int // NumCPU is the number of CPUs to create inside the sandbox. NumCPU int // TotalMem is the initial amount of total memory to report back to the // container. TotalMem uint64 // UserLogFD is the file descriptor to write user logs to. UserLogFD int // ProfileBlockFD is the file descriptor to write a block profile to. // Valid if >=0. ProfileBlockFD int // ProfileCPUFD is the file descriptor to write a CPU profile to. // Valid if >=0. ProfileCPUFD int // ProfileHeapFD is the file descriptor to write a heap profile to. // Valid if >=0. ProfileHeapFD int // ProfileMutexFD is the file descriptor to write a mutex profile to. // Valid if >=0. ProfileMutexFD int // TraceFD is the file descriptor to write a Go execution trace to. // Valid if >=0. TraceFD int }
Args are the arguments for New().
type CPUUsage ¶
type CPUUsage struct { Kernel uint64 `json:"kernel,omitempty"` User uint64 `json:"user,omitempty"` Total uint64 `json:"total,omitempty"` PerCPU []uint64 `json:"percpu,omitempty"` }
CPUUsage contains stats on CPU usage.
type CreateArgs ¶
type CreateArgs struct { // CID is the ID of the container to start. CID string // FilePayload may contain a TTY file for the terminal, if enabled. urpc.FilePayload }
CreateArgs contains arguments to the Create method.
type CreateLinksAndRoutesArgs ¶
type CreateLinksAndRoutesArgs struct { // FilePayload contains the fds associated with the FDBasedLinks. The // number of fd's should match the sum of the NumChannels field of the // FDBasedLink entries below. urpc.FilePayload LoopbackLinks []LoopbackLink FDBasedLinks []FDBasedLink Defaultv4Gateway DefaultRoute Defaultv6Gateway DefaultRoute }
CreateLinksAndRoutesArgs are arguments to CreateLinkAndRoutes.
type DefaultRoute ¶
DefaultRoute represents a catch all route to the default gateway.
type Event ¶
Event struct for encoding the event data to JSON. Corresponds to runc's main.event struct.
type EventOut ¶
type EventOut struct { Event Event `json:"event"` // ContainerUsage maps each container ID to its total CPU usage. ContainerUsage map[string]uint64 `json:"containerUsage"` }
EventOut is the return type of the Event command.
type FDBasedLink ¶
type FDBasedLink struct { Name string MTU int Addresses []IPWithPrefix Routes []Route GSOMaxSize uint32 SoftwareGSOEnabled bool TXChecksumOffload bool RXChecksumOffload bool LinkAddress net.HardwareAddr QDisc config.QueueingDiscipline Neighbors []Neighbor // NumChannels controls how many underlying FD's are to be used to // create this endpoint. NumChannels int }
FDBasedLink configures an fd-based link.
type IPWithPrefix ¶
type IPWithPrefix struct { // Address is a network address. Address net.IP // PrefixLen is the subnet prefix length. PrefixLen int }
IPWithPrefix is an address with its subnet prefix length.
func (IPWithPrefix) String ¶
func (ip IPWithPrefix) String() string
type Loader ¶
type Loader struct {
// contains filtered or unexported fields
}
Loader keeps state needed to start the kernel and run the container.
func New ¶
New initializes a new kernel loader configured by spec. New also handles setting up a kernel for restoring a container.
func (*Loader) Destroy ¶
func (l *Loader) Destroy()
Destroy cleans up all resources used by the loader.
Note that this will block until all open control server connections have been closed. For that reason, this should NOT be called in a defer, because a panic in a control server rpc would then hang forever.
func (*Loader) WaitExit ¶
func (l *Loader) WaitExit() linux.WaitStatus
WaitExit waits for the root container to exit, and returns its exit status.
func (*Loader) WaitForStartSignal ¶
func (l *Loader) WaitForStartSignal()
WaitForStartSignal waits for a start signal from the control server.
type LoopbackLink ¶
type LoopbackLink struct { Name string Addresses []IPWithPrefix Routes []Route }
LoopbackLink configures a loopback li nk.
type Memory ¶
type Memory struct { Cache uint64 `json:"cache,omitempty"` Usage MemoryEntry `json:"usage,omitempty"` Swap MemoryEntry `json:"swap,omitempty"` Kernel MemoryEntry `json:"kernel,omitempty"` KernelTCP MemoryEntry `json:"kernelTCP,omitempty"` Raw map[string]uint64 `json:"raw,omitempty"` }
Memory contains stats on memory.
type MemoryEntry ¶
type MemoryEntry struct { Limit uint64 `json:"limit"` Usage uint64 `json:"usage,omitempty"` Max uint64 `json:"max,omitempty"` Failcnt uint64 `json:"failcnt"` }
MemoryEntry contains stats on a kind of memory.
type Network ¶
Network exposes methods that can be used to configure a network stack.
func (*Network) CreateLinksAndRoutes ¶
func (n *Network) CreateLinksAndRoutes(args *CreateLinksAndRoutesArgs, _ *struct{}) error
CreateLinksAndRoutes creates links and routes in a network stack. It should only be called once.
type Pids ¶
type Pids struct { Current uint64 `json:"current,omitempty"` Limit uint64 `json:"limit,omitempty"` }
Pids contains stats on processes.
type RestoreOpts ¶
type RestoreOpts struct { // FilePayload contains the state file to be restored, followed by the // platform device file if necessary. urpc.FilePayload // SandboxID contains the ID of the sandbox. SandboxID string }
RestoreOpts contains options related to restoring a container's file system.
type SignalArgs ¶
type SignalArgs struct { // CID is the container ID. CID string // Signo is the signal to send to the process. Signo int32 // PID is the process ID in the given container that will be signaled, // relative to the root PID namespace, not the container's. // If 0, the root container will be signalled. PID int32 // Mode is the signal delivery mode. Mode SignalDeliveryMode }
SignalArgs are arguments to the Signal method.
type SignalDeliveryMode ¶
type SignalDeliveryMode int
SignalDeliveryMode enumerates different signal delivery modes.
const ( // DeliverToProcess delivers the signal to the container process with // the specified PID. If PID is 0, then the container init process is // signaled. DeliverToProcess SignalDeliveryMode = iota // DeliverToAllProcesses delivers the signal to all processes in the // container. PID must be 0. DeliverToAllProcesses // DeliverToForegroundProcessGroup delivers the signal to the // foreground process group in the same TTY session as the specified // process. If PID is 0, then the signal is delivered to the foreground // process group for the TTY for the init process. DeliverToForegroundProcessGroup )
func (SignalDeliveryMode) String ¶
func (s SignalDeliveryMode) String() string
type StartArgs ¶
type StartArgs struct { // Spec is the spec of the container to start. Spec *specs.Spec // Config is the runsc-specific configuration for the sandbox. Conf *config.Config // CID is the ID of the container to start. CID string // FilePayload contains, in order: // * stdin, stdout, and stderr (optional: if terminal is disabled). // * file descriptors to connect to gofer to serve the root filesystem. urpc.FilePayload }
StartArgs contains arguments to the Start method.
type Stats ¶
Stats is the runc specific stats structure for stability when encoding and decoding stats.
type WaitPIDArgs ¶
type WaitPIDArgs struct { // PID is the PID in the container's PID namespace. PID int32 // CID is the container ID. CID string }
WaitPIDArgs are arguments to the WaitPID method.
Source Files
¶
Directories
¶
Path | Synopsis |
---|---|
Package filter defines all syscalls the sandbox is allowed to make to the host, and installs seccomp filters to prevent prohibited syscalls in case it's compromised.
|
Package filter defines all syscalls the sandbox is allowed to make to the host, and installs seccomp filters to prevent prohibited syscalls in case it's compromised. |
Package platforms imports all available platform packages.
|
Package platforms imports all available platform packages. |
nonstandard
Package nonstandard provides a place for nonstandard platforms.
|
Package nonstandard provides a place for nonstandard platforms. |
Package pprof provides a stub to initialize custom profilers.
|
Package pprof provides a stub to initialize custom profilers. |