Justin Cormack
bd25c68032
Explicitly use slirp-proxy in iptables
...
So as to allow a read only root filesystem, we use the proxy
path config option to override the Docker proxy for 1.13.
This means that the iptables override needs to call this binary
not the original docker-proxy binary to allow port forwarding.
Signed-off-by: Justin Cormack <justin.cormack@docker.com >
2016-11-23 13:48:27 +00:00
David Scott
cd052f1fe0
iptables wrapper: write to syslog rather than /var/log/service-port-opener.log
...
This will enable proper log rotation and is simpler.
Signed-off-by: David Scott <dave.scott@docker.com >
2016-09-01 11:28:14 +01:00
David Scott
4f205ed9b2
iptables: log to /var/log/... rather than /var/run/log
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
f6a85c0592
iptables: only open host ports if native/port-forwarding=true in the db
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
9762094fbb
iptables: add a TODO
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
b6fb908ae5
iptables: remove the pid file after sending SIGTERM
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
5726f2b2c3
iptables: get the kill arguments the right way round
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
a97d9b92bc
iptables: close all the fds we inherit from docker
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
b672ec9bdd
Add primitive iptables wrapper which can set up port forwards
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
Ian Campbell
70514d09b3
Simple build system for ocaml-based iptables
...
Signed-off-by: Ian Campbell <ian.campbell@docker.com >
2016-07-12 10:26:39 +01:00
