miragesdk: use a custom BPF filter to allow the calf to get a DHCP lease

Plus a few more minor improvements:

- compile with jbuilder.
- start working on the control path.

Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
This commit is contained in:
Thomas Gazagnaire
2017-03-23 14:03:06 +01:00
parent b0f758a20d
commit 1bee082c6c
13 changed files with 269 additions and 48 deletions

View File

@@ -125,6 +125,7 @@ and is able to get a DHCP lease on boot.
##### TODO
- use runc to isolate the calf
- system handler (see https://github.com/kobolabs/dhcpcd/tree/kobo/dhcpcd-hooks)
- eBPF filtering
- use seccomp to isolate the privileged container
- use the DHCP results to actually update the system
@@ -135,4 +136,4 @@ and is able to get a DHCP lease on boot.
### Second iteration: NTP
TODO
TODO