mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-07-21 10:09:07 +00:00
system → onboot daemon → services
As suggested by @shykes these are clearer - onboot for things that are run at boot time to completion - services for persistent services Signed-off-by: Justin Cormack <justin.cormack@docker.com>
This commit is contained in:
parent
5956f7203a
commit
eb22d6909f
@ -2,11 +2,11 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -27,7 +27,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
- CAP_MKNOD
|
- CAP_MKNOD
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -2,11 +2,11 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=ttyS0 page_poison=1"
|
cmdline: "console=ttyS0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -30,7 +30,7 @@ system:
|
|||||||
uts: host
|
uts: host
|
||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -2,11 +2,11 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=ttyS0 page_poison=1"
|
cmdline: "console=ttyS0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -18,7 +18,7 @@ system:
|
|||||||
image: "mobylinux/binfmt:bdb754f25a5d851b4f5f8d185a43dfcbb3c22d01"
|
image: "mobylinux/binfmt:bdb754f25a5d851b4f5f8d185a43dfcbb3c22d01"
|
||||||
binds:
|
binds:
|
||||||
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -2,11 +2,11 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=tty0 page_poison=1"
|
cmdline: "console=tty0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -20,7 +20,7 @@ system:
|
|||||||
binds:
|
binds:
|
||||||
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
6
moby.yml
6
moby.yml
@ -2,11 +2,11 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -20,7 +20,7 @@ system:
|
|||||||
binds:
|
binds:
|
||||||
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -1,15 +1,10 @@
|
|||||||
#!/bin/sh
|
#!/bin/sh
|
||||||
|
|
||||||
# TODO more robust
|
# start onboot containers, run to completion
|
||||||
# while [ ! -S /run/containerd/containerd.sock ]; do sleep 1; done
|
|
||||||
# while ! ctr list 2> /dev/null; do sleep 1; done
|
|
||||||
|
|
||||||
# start system containers
|
if [ -d /containers/onboot ]
|
||||||
# temporarily using runc not containerd
|
|
||||||
|
|
||||||
if [ -d /containers/system ]
|
|
||||||
then
|
then
|
||||||
for f in $(find /containers/system -mindepth 1 -maxdepth 1 | sort)
|
for f in $(find /containers/onboot -mindepth 1 -maxdepth 1 | sort)
|
||||||
do
|
do
|
||||||
base="$(basename $f)"
|
base="$(basename $f)"
|
||||||
/usr/bin/runc run --bundle "$f" "$(basename $f)"
|
/usr/bin/runc run --bundle "$f" "$(basename $f)"
|
||||||
@ -17,9 +12,12 @@ then
|
|||||||
done
|
done
|
||||||
fi
|
fi
|
||||||
|
|
||||||
if [ -d /containers/daemon ]
|
# start service containers
|
||||||
|
# temporarily using runc not containerd
|
||||||
|
|
||||||
|
if [ -d /containers/services ]
|
||||||
then
|
then
|
||||||
for f in $(find /containers/daemon -mindepth 1 -maxdepth 1 | sort)
|
for f in $(find /containers/services -mindepth 1 -maxdepth 1 | sort)
|
||||||
do
|
do
|
||||||
base="$(basename $f)"
|
base="$(basename $f)"
|
||||||
log="/var/log/$base.log"
|
log="/var/log/$base.log"
|
||||||
|
@ -3,7 +3,7 @@ kernel:
|
|||||||
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- "mobylinux/init:a27e32a8d6c8865d691fbfb4d0bbb93846cf7802"
|
- "mobylinux/init:a27e32a8d6c8865d691fbfb4d0bbb93846cf7802"
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -12,7 +12,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -3,7 +3,7 @@ kernel:
|
|||||||
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- "mobylinux/init:a27e32a8d6c8865d691fbfb4d0bbb93846cf7802"
|
- "mobylinux/init:a27e32a8d6c8865d691fbfb4d0bbb93846cf7802"
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -12,7 +12,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: dhcpcd
|
- name: dhcpcd
|
||||||
image: "mobylinux/dhcpcd:3eb32da7ff8051f61e0f18edd90dd0fbfcf148ea"
|
image: "mobylinux/dhcpcd:3eb32da7ff8051f61e0f18edd90dd0fbfcf148ea"
|
||||||
binds:
|
binds:
|
||||||
|
@ -3,7 +3,7 @@ kernel:
|
|||||||
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
|
- "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -24,7 +24,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
- CAP_MKNOD
|
- CAP_MKNOD
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -3,7 +3,7 @@ kernel:
|
|||||||
cmdline: "console=ttyS0 page_poison=1"
|
cmdline: "console=ttyS0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- "mobylinux/init:9d755f7e7d108d523448e4a503f1613b7d870389@sha256:9ccb16f2d8b3a09d12f5459106763f1836c064e420a13360e2e25599337960dc"
|
- "mobylinux/init:9d755f7e7d108d523448e4a503f1613b7d870389@sha256:9ccb16f2d8b3a09d12f5459106763f1836c064e420a13360e2e25599337960dc"
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -17,7 +17,7 @@ system:
|
|||||||
binds:
|
binds:
|
||||||
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -3,7 +3,7 @@ kernel:
|
|||||||
cmdline: "console=ttyS0 page_poison=1 security=selinux selinux=1"
|
cmdline: "console=ttyS0 page_poison=1 security=selinux selinux=1"
|
||||||
init:
|
init:
|
||||||
- "mobylinux/init:b5249a412536b4e69f8e1f668680d2ae185cc505"
|
- "mobylinux/init:b5249a412536b4e69f8e1f668680d2ae185cc505"
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -12,7 +12,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -3,7 +3,7 @@ kernel:
|
|||||||
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
|
- "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1"
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -17,7 +17,7 @@ system:
|
|||||||
binds:
|
binds:
|
||||||
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -3,7 +3,7 @@ kernel:
|
|||||||
cmdline: "console=ttyS0 page_poison=1"
|
cmdline: "console=ttyS0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- "mobylinux/init-wireguard:4309fb8b65cafa9e07b0e75d86a0bff4070e67e9"
|
- "mobylinux/init-wireguard:4309fb8b65cafa9e07b0e75d86a0bff4070e67e9"
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -12,7 +12,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
@ -137,8 +137,8 @@ func buildInternal(name string, pull bool, conf string) {
|
|||||||
initrdAppend(iw, buffer)
|
initrdAppend(iw, buffer)
|
||||||
}
|
}
|
||||||
|
|
||||||
log.Infof("Add system containers:")
|
log.Infof("Add onboot containers:")
|
||||||
for i, image := range m.System {
|
for i, image := range m.Onboot {
|
||||||
if pull || enforceContentTrust(image.Image, &m.Trust) {
|
if pull || enforceContentTrust(image.Image, &m.Trust) {
|
||||||
log.Infof(" Pull: %s", image.Image)
|
log.Infof(" Pull: %s", image.Image)
|
||||||
err := dockerPull(image.Image, enforceContentTrust(image.Image, &m.Trust))
|
err := dockerPull(image.Image, enforceContentTrust(image.Image, &m.Trust))
|
||||||
@ -152,7 +152,7 @@ func buildInternal(name string, pull bool, conf string) {
|
|||||||
log.Fatalf("Failed to create config.json for %s: %v", image.Image, err)
|
log.Fatalf("Failed to create config.json for %s: %v", image.Image, err)
|
||||||
}
|
}
|
||||||
so := fmt.Sprintf("%03d", i)
|
so := fmt.Sprintf("%03d", i)
|
||||||
path := "containers/system/" + so + "-" + image.Name
|
path := "containers/onboot/" + so + "-" + image.Name
|
||||||
out, err := ImageBundle(path, image.Image, config)
|
out, err := ImageBundle(path, image.Image, config)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
log.Fatalf("Failed to extract root filesystem for %s: %v", image.Image, err)
|
log.Fatalf("Failed to extract root filesystem for %s: %v", image.Image, err)
|
||||||
@ -161,8 +161,8 @@ func buildInternal(name string, pull bool, conf string) {
|
|||||||
initrdAppend(iw, buffer)
|
initrdAppend(iw, buffer)
|
||||||
}
|
}
|
||||||
|
|
||||||
log.Infof("Add daemon containers:")
|
log.Infof("Add service containers:")
|
||||||
for _, image := range m.Daemon {
|
for _, image := range m.Services {
|
||||||
if pull || enforceContentTrust(image.Image, &m.Trust) {
|
if pull || enforceContentTrust(image.Image, &m.Trust) {
|
||||||
log.Infof(" Pull: %s", image.Image)
|
log.Infof(" Pull: %s", image.Image)
|
||||||
err := dockerPull(image.Image, enforceContentTrust(image.Image, &m.Trust))
|
err := dockerPull(image.Image, enforceContentTrust(image.Image, &m.Trust))
|
||||||
@ -175,7 +175,7 @@ func buildInternal(name string, pull bool, conf string) {
|
|||||||
if err != nil {
|
if err != nil {
|
||||||
log.Fatalf("Failed to create config.json for %s: %v", image.Image, err)
|
log.Fatalf("Failed to create config.json for %s: %v", image.Image, err)
|
||||||
}
|
}
|
||||||
path := "containers/daemon/" + image.Name
|
path := "containers/services/" + image.Name
|
||||||
out, err := ImageBundle(path, image.Image, config)
|
out, err := ImageBundle(path, image.Image, config)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
log.Fatalf("Failed to extract root filesystem for %s: %v", image.Image, err)
|
log.Fatalf("Failed to extract root filesystem for %s: %v", image.Image, err)
|
||||||
|
@ -25,8 +25,8 @@ type Moby struct {
|
|||||||
Cmdline string
|
Cmdline string
|
||||||
}
|
}
|
||||||
Init []string
|
Init []string
|
||||||
System []MobyImage
|
Onboot []MobyImage
|
||||||
Daemon []MobyImage
|
Services []MobyImage
|
||||||
Trust TrustConfig
|
Trust TrustConfig
|
||||||
Files []struct {
|
Files []struct {
|
||||||
Path string
|
Path string
|
||||||
|
@ -2,18 +2,18 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=ttyS0"
|
cmdline: "console=ttyS0"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: ltp
|
- name: ltp
|
||||||
image: "mobylinux/test-ltp-20170116:fdca2d1bb019b1d51e722e6032c82c7933d4b870"
|
image: "mobylinux/test-ltp-20170116:fdca2d1bb019b1d51e722e6032c82c7933d4b870"
|
||||||
net: host
|
net: host
|
||||||
pid: host
|
pid: host
|
||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
daemon:
|
services:
|
||||||
- name: dhcpcd
|
- name: dhcpcd
|
||||||
image: "mobylinux/dhcpcd:3eb32da7ff8051f61e0f18edd90dd0fbfcf148ea"
|
image: "mobylinux/dhcpcd:3eb32da7ff8051f61e0f18edd90dd0fbfcf148ea"
|
||||||
binds:
|
binds:
|
||||||
|
@ -2,11 +2,11 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=ttyS0"
|
cmdline: "console=ttyS0"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: binfmt
|
- name: binfmt
|
||||||
image: "mobylinux/binfmt:bdb754f25a5d851b4f5f8d185a43dfcbb3c22d01"
|
image: "mobylinux/binfmt:bdb754f25a5d851b4f5f8d185a43dfcbb3c22d01"
|
||||||
binds:
|
binds:
|
||||||
@ -18,7 +18,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_BOOT
|
- CAP_SYS_BOOT
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: dhcpcd
|
- name: dhcpcd
|
||||||
image: "mobylinux/dhcpcd:3eb32da7ff8051f61e0f18edd90dd0fbfcf148ea"
|
image: "mobylinux/dhcpcd:3eb32da7ff8051f61e0f18edd90dd0fbfcf148ea"
|
||||||
binds:
|
binds:
|
||||||
|
@ -6,11 +6,11 @@ kernel:
|
|||||||
image: "mobylinux/kernel:4.9.x"
|
image: "mobylinux/kernel:4.9.x"
|
||||||
cmdline: "console=ttyS0 page_poison=1"
|
cmdline: "console=ttyS0 page_poison=1"
|
||||||
init:
|
init:
|
||||||
- mobylinux/init:925c88f42d92d57cd36b656db1f8757b152163a7
|
- mobylinux/init:02f05d99b4eb9cd9223bb5915f4070cf7b67c862
|
||||||
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
|
||||||
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
- mobylinux/containerd:68bb523deea09da293d675cbf88474eced540b8c
|
||||||
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
||||||
system:
|
onboot:
|
||||||
- name: sysctl
|
- name: sysctl
|
||||||
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
||||||
net: host
|
net: host
|
||||||
@ -19,7 +19,7 @@ system:
|
|||||||
capabilities:
|
capabilities:
|
||||||
- CAP_SYS_ADMIN
|
- CAP_SYS_ADMIN
|
||||||
readonly: true
|
readonly: true
|
||||||
daemon:
|
services:
|
||||||
- name: rngd
|
- name: rngd
|
||||||
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
||||||
capabilities:
|
capabilities:
|
||||||
|
Loading…
Reference in New Issue
Block a user