aljaz/kata-containers
1
0
Fork 0
mirror of https://github.com/aljazceru/kata-containers.git synced 2026-01-30 11:44:26 +01:00
Code Issues Packages Projects Releases Wiki Activity
9,858 Commits 30 Branches 115 Tags
a5dd0cd3aba8a7276d8f2d2eeff5ac888141d08a
Commit Graph

43 Commits

Author SHA1 Message Date
Bin Liu
3aeaa6459d runtime-rs: delete duplicated PASSTHROUGH_FS_DIR const 
The const PASSTHROUGH_FS_DIR defined twice, delte one.

Fixes: #5301

Signed-off-by: Bin Liu <bin@hyper.sh>
 2022-09-30 15:53:08 +08:00
Zhongtao Hu
96cf21fad0 runtime-rs: add comments for runtime-rs shared directory 
add comments for runtime-rs shared directory

Fixes:#5197
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-09-28 15:46:34 +08:00
Zhongtao Hu
ff053b0808 Merge pull request #5220 from liubin/fix/5184-rs-inotify 
runtime-rs: support watchable mount
 2022-09-28 11:19:53 +08:00
Bin Liu
4a763925e5 runtime-rs: support watchable mount 
Use watchable mount to support inotify for virtio-fs.

Fixes: #5184

Signed-off-by: Bin Liu <bin@hyper.sh>
 2022-09-27 19:08:25 +08:00
Bin Liu
5a98fb8d2b Merge pull request #5186 from liubin/fix/5185 
runtime-rs: use Path.is_file to check regular files
 2022-09-26 12:33:47 +08:00
Zhongtao Hu
4a36bb9e21 Merge pull request #4924 from openanolis/runtime-rs-netUT 
runtime-rs: add unit tests for network resource
 2022-09-23 17:45:24 +08:00
Bin Liu
9670a3caac runtime-rs: use Path.is_file to check regular files 
Use Path.is_file to replace using `stat` to check the file type.

Fixes: #5185

Signed-off-by: Bin Liu <bin@hyper.sh>
 2022-09-19 15:57:07 +08:00
Bin Liu
a8a8a28a34 runtime-rs/resource: use macro to reduce duplicated code 
Some device types have the same definition, they can be implemented
by macro to reduce code.

And this commit also deleted the `peer_name` field of the structs that
is never been used.

Fixes: #5170

Signed-off-by: Bin Liu <bin@hyper.sh>
 2022-09-15 15:45:26 +08:00
Bin Liu
156e1c3247 runtime-rs: delete some allow(dead_code) attributes 
Some #![allow(dead_code)]s and code are not needed indeed.

Fixes: #5164

Signed-off-by: Bin Liu <bin@hyper.sh>
 2022-09-14 20:50:30 +08:00
Tim Zhang
8ec4edcf4f Merge pull request #5146 from liubin/fix/5145-check-host-dev 
runtime-rs: fix host device check pattern
 2022-09-13 10:33:05 +08:00
Bin Liu
62cf6e6fc3 runtime-rs: remove meaningless comment 
The comment for `generate_mount_path` function is a copy miss
and should be deleted.

Fixes: #5150

Signed-off-by: Bin Liu <bin@hyper.sh>
 2022-09-09 16:07:35 +08:00
bin liu
2b1d058572 runtime-rs: fix host device check pattern 
Host devices should start with `/dev/` but not `/dev`.

Fixes: #5145

Signed-off-by: bin liu <liubin0329@gmail.com>
 2022-09-08 22:44:46 +08:00
Ji-Xinyou
a828292b47 runtime-rs: add unit tests for network resource 
Add UTs for network resource

Fixes: #4923
Signed-off-by: Ji-Xinyou <jerryji0414@outlook.com>
 2022-09-01 10:13:09 +08:00
Derek Lee
7914da72c9 cargo.tomls: Added Apache 2.0 to cargo.tomls 
One of the checks done by cargo-deny is ensuring all crates have a valid
license. As the rust programs import each other, cargo.toml files
without licenses trigger the check. While I could disable this check
this would be bad practice.

This adds an Apache-2.0 license in the Cargo.toml files.

Some of these files already had a header comment saying it is an Apache
license. As the entire project itself is under an Apache-2.0 license, I
assumed all individual components would also be covered under that
license.

Signed-off-by: Derek Lee <derlee@redhat.com>
 2022-08-30 09:30:03 -07:00
Peng Tao
338c282950 dep: update nix dependency 
To fix CVE-2021-45707 that affects nix < 0.20.2.

Fixes: #4929
Signed-off-by: Peng Tao <bergwolf@hyper.sh>
 2022-08-17 16:06:26 +08:00
Bin Liu
828574d27c Merge pull request #4893 from openanolis/runtime-rs-main 
Runtime-rs: support persist file
 2022-08-16 14:42:22 +08:00
Zhongtao Hu
4d7f3edbaf runtime-rs: support the functionality of cleanup 
Cleanup sandbox resource

Fixes: #4891
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-08-13 15:56:38 +08:00
Zhongtao Hu
5aa83754e5 runtime-rs: support save to persist file and restore 
Support the functionality of save and restore for sandbox state

Fixes:#4891
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-08-13 15:44:13 +08:00
Zhongtao Hu
c280d6965b runtime-rs: delete route model 
As route model is used for specific internal scenario, and it's not for
the general requirement.

Fixes:#4838
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-08-11 15:56:43 +08:00
Zhongtao Hu
8bbffc42cf runtime-rs:update rtnetlink version 
update rtnetlink version for runtime-rs

Fixes:#4824
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-08-05 11:18:09 +08:00
Peng Tao
5457deb034 Merge pull request #4741 from openanolis/fix-stop-failed-in-azure 
runtime-rs: fix stop failed in azure
 2022-07-29 11:41:16 +08:00
Peng Tao
129335714b Merge pull request #4727 from openanolis/anolis-fix-network 
fix network failed for kata ci
 2022-07-26 15:10:55 +08:00
Quanwei Zhou
57c556a801 runtime-rs: fix stop failed in azure 
Fix the stop failed in azure.

Fixes: #4740
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-07-26 12:16:32 +08:00
Peng Tao
3f4dd92c2d Merge pull request #4702 from openanolis/runtime-rs-endpoint-dev 
runtime-rs: add functionalities support for macvlan and vlan endpoints
 2022-07-25 17:04:45 +08:00
Quanwei Zhou
c825065b27 runtime-rs: fix tc filter setup failed 
Fix bug using tc filter and protocol needs to use network byte order.

Fixes: #4726
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-07-25 11:16:33 +08:00
Quanwei Zhou
e0194dcb5e runtime-rs: update route destination with prefix 
Update route destination with prefix.

Fixes: #4726
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-07-25 11:16:22 +08:00
Ji-Xinyou
896478c92b runtime-rs: add functionalities support for macvlan and vlan endpoints 
Add macvlan and vlan support to runtime-rs code and corresponding unit
tests.

Fixes: #4701
Signed-off-by: Ji-Xinyou <jerryji0414@outlook.com>
 2022-07-22 10:09:11 +08:00
Quanwei Zhou
54f53d57ef runtime-rs: support disable_guest_seccomp 
support disable_guest_seccomp

Fixes: #4691
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-07-21 07:46:28 +08:00
Bin Liu
540303880e Merge pull request #4688 from quanweiZhou/fix_sandbox_cgroup_false 
runtime-rs: fix sandbox_cgroup_only=false panic
 2022-07-19 20:38:57 +08:00
Peng Tao
4c3bd6b1d1 Merge pull request #4656 from openanolis/runtime-rs-ipvlan 
runtime-rs: support functionalities of ipvlan endpoint
 2022-07-19 11:15:31 +08:00
Quanwei Zhou
e9988f0c68 runtime-rs: fix sandbox_cgroup_only=false panic 
When run with configuration `sandbox_cgroup_only=false`, we will call
`gen_overhead_path()` as the overhead path. The `cgroup-rs` will push
the path with the subsystem prefix by `PathBuf::push()`. When the path
has prefix “/” it will act as root path, such as
```
let mut path = PathBuf::from("/tmp");
path.push("/etc");
assert_eq!(path, PathBuf::from("/etc"));
```
So we shoud not set overhead path with prefix "/".

Fixes: #4687
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-07-19 08:30:34 +08:00
Ji-Xinyou
62182db645 runtime-rs: add unit test for ipvlan endpoint 
Add unit test to check the integrity of IPVlanEndpoint::new(...)

Fixes: #4655
Signed-off-by: Ji-Xinyou <jerryji0414@outlook.com>
 2022-07-18 15:56:06 +08:00
Ji-Xinyou
d8920b00cd runtime-rs: support functionalities of ipvlan endpoint 
Add support for ipvlan endpoint

Fixes: #4655
Signed-off-by: Ji-Xinyou <jerryji0414@outlook.com>
 2022-07-18 11:34:03 +08:00
liubin
996a6b80bc kata-sys-util: upgrade nix version 
New nix is supporting UMOUNT_NOFOLLOW, upgrade nix
version to use this flag instead of the self-defined flag.

Fixes: #4670

Signed-off-by: liubin <liubin0329@gmail.com>
 2022-07-15 17:38:15 +08:00
Quanwei Zhou
3c989521b1 dragonball: update for review 
update for review

Fixes: #3785
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-07-14 10:43:59 +08:00
Quanwei Zhou
3d6156f6ec runtime-rs: support dragonball and runtime-binary 
Fixes: #3785
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-07-14 08:49:30 +08:00
Zhongtao Hu
07231b2f3f runtime-rs:refactor network model with netlink 
add unit test for tcfilter

Fixes: #4289
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-06-29 11:38:23 +08:00
Zhongtao Hu
9c526292e7 runtime-rs:refactor network model with netlink 
refactor tcfilter with netlink

Fixes: #4289
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-06-29 11:03:29 +08:00
Fupan Li
9cb15ab4c5 agent: add the FSGroup support 
Signed-off-by: Fupan Li <fupan.lfp@antgroup.com>
 2022-06-11 11:30:51 +08:00
Zhongtao Hu
06f398a34f runtime-rs: use withContext to evaluate lazily 
Fixes: #4129
Signed-off-by: Zhongtao Hu <zhongtaohu.tim@linux.alibaba.com>
 2022-06-10 22:03:13 +08:00
Quanwei Zhou
fd4c26f9c1 runtime-rs: support network resource 
Fixes: #3785
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-06-10 22:02:58 +08:00
Quanwei Zhou
3ff0db05a7 runtime-rs: support rootfs volume for resource 
Fixes: #3785
Signed-off-by: Quanwei Zhou <quanweiZhou@linux.alibaba.com>
 2022-06-10 19:58:01 +08:00
Tim Zhang
234d7bca04 runtime-rs: support cgroup resource 
Fixes: #3785
Signed-off-by: Tim Zhang <tim@hyper.sh>
 2022-06-10 19:57:53 +08:00