mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-07-26 05:03:09 +00:00
Make dockershim better implements CRI.
This commit is contained in:
parent
36a5c0091b
commit
0351629517
@ -297,6 +297,8 @@ func (ds *dockerService) PodSandboxStatus(podSandboxID string) (*runtimeapi.PodS
|
|||||||
Network: netNS,
|
Network: netNS,
|
||||||
Options: &runtimeapi.NamespaceOption{
|
Options: &runtimeapi.NamespaceOption{
|
||||||
HostNetwork: hostNetwork,
|
HostNetwork: hostNetwork,
|
||||||
|
HostPid: sharesHostPid(r),
|
||||||
|
HostIpc: sharesHostIpc(r),
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
@ -489,7 +491,7 @@ func (ds *dockerService) makeSandboxDockerConfig(c *runtimeapi.PodSandboxConfig,
|
|||||||
return createConfig, nil
|
return createConfig, nil
|
||||||
}
|
}
|
||||||
|
|
||||||
// sharesHostNetwork true if the given container is sharing the hosts's
|
// sharesHostNetwork returns true if the given container is sharing the host's
|
||||||
// network namespace.
|
// network namespace.
|
||||||
func sharesHostNetwork(container *dockertypes.ContainerJSON) bool {
|
func sharesHostNetwork(container *dockertypes.ContainerJSON) bool {
|
||||||
if container != nil && container.HostConfig != nil {
|
if container != nil && container.HostConfig != nil {
|
||||||
@ -498,6 +500,24 @@ func sharesHostNetwork(container *dockertypes.ContainerJSON) bool {
|
|||||||
return false
|
return false
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// sharesHostPid returns true if the given container is sharing the host's pid
|
||||||
|
// namespace.
|
||||||
|
func sharesHostPid(container *dockertypes.ContainerJSON) bool {
|
||||||
|
if container != nil && container.HostConfig != nil {
|
||||||
|
return string(container.HostConfig.PidMode) == namespaceModeHost
|
||||||
|
}
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
|
||||||
|
// sharesHostIpc returns true if the given container is sharing the host's ipc
|
||||||
|
// namespace.
|
||||||
|
func sharesHostIpc(container *dockertypes.ContainerJSON) bool {
|
||||||
|
if container != nil && container.HostConfig != nil {
|
||||||
|
return string(container.HostConfig.IpcMode) == namespaceModeHost
|
||||||
|
}
|
||||||
|
return false
|
||||||
|
}
|
||||||
|
|
||||||
func setSandboxResources(hc *dockercontainer.HostConfig) {
|
func setSandboxResources(hc *dockercontainer.HostConfig) {
|
||||||
hc.Resources = dockercontainer.Resources{
|
hc.Resources = dockercontainer.Resources{
|
||||||
MemorySwap: dockertools.DefaultMemorySwap(),
|
MemorySwap: dockertools.DefaultMemorySwap(),
|
||||||
|
Loading…
Reference in New Issue
Block a user