package libcontainer
import "github.com/opencontainers/runc/libcontainer"
Libcontainer provides a native Go implementation for creating containers with namespaces, cgroups, capabilities, and filesystem access controls. It allows you to manage the lifecycle of the container performing additional operations after the container is created.
Index ¶
- type BaseContainer
- type BaseState
- type Console
- type Error
- type ErrorCode
- type Factory
- type NetworkInterface
- type Process
- func (p *Process) ConsoleFromPath(path string) error
- func (p *Process) NewConsole(rootuid int) (Console, error)
- func (p Process) Pid() (int, error)
- func (p Process) Signal(sig os.Signal) error
- func (p Process) Wait() (*os.ProcessState, error)
- type Status
Types ¶
type BaseContainer ¶
type BaseContainer interface { // Returns the ID of the container ID() string // Returns the current status of the container. // // errors: // ContainerDestroyed - Container no longer exists, // Systemerror - System error. Status() (Status, error) // State returns the current container's state information. // // errors: // Systemerror - System error. State() (*State, error) // Returns the current config of the container. Config() configs.Config // Returns the PIDs inside this container. The PIDs are in the namespace of the calling process. // // errors: // ContainerDestroyed - Container no longer exists, // Systemerror - System error. // // Some of the returned PIDs may no longer refer to processes in the Container, unless // the Container state is PAUSED in which case every PID in the slice is valid. Processes() ([]int, error) // Returns statistics for the container. // // errors: // ContainerDestroyed - Container no longer exists, // Systemerror - System error. Stats() (*Stats, error) // Set resources of container as configured // // We can use this to change resources when containers are running. // // errors: // Systemerror - System error. Set(config configs.Config) error // Start a process inside the container. Returns error if process fails to // start. You can track process lifecycle with passed Process structure. // // errors: // ContainerDestroyed - Container no longer exists, // ConfigInvalid - config is invalid, // ContainerPaused - Container is paused, // Systemerror - System error. Start(process *Process) (err error) // Destroys the container after killing all running processes. // // Any event registrations are removed before the container is destroyed. // No error is returned if the container is already destroyed. // // errors: // Systemerror - System error. Destroy() error // Signal sends the provided signal code to the container's initial process. // // errors: // Systemerror - System error. Signal(s os.Signal) error }
A libcontainer container object.
Each container is thread-safe within the same process. Since a container can be destroyed by a separate process, any function may return that the container was not found. BaseContainer includes methods that are platform agnostic.
type BaseState ¶
type BaseState struct { // ID is the container ID. ID string `json:"id"` // InitProcessPid is the init process id in the parent namespace. InitProcessPid int `json:"init_process_pid"` // InitProcessStartTime is the init process start time. InitProcessStartTime string `json:"init_process_start"` // Config is the container's configuration. Config configs.Config `json:"config"` }
BaseState represents the platform agnostic pieces relating to a running container's state
type Console ¶
type Console interface { io.ReadWriter io.Closer // Path returns the filesystem path to the slave side of the pty. Path() string // Fd returns the fd for the master of the pty. Fd() uintptr }
Console represents a pseudo TTY.
type Error ¶
type Error interface { error // Returns a verbose string including the error message // and a representation of the stack trace suitable for // printing. Detail(w io.Writer) error // Returns the error code for this error. Code() ErrorCode }
API Error type.
type ErrorCode ¶
type ErrorCode int
API error code type.
const ( // Factory errors IdInUse ErrorCode = iota InvalidIdFormat // Container errors ContainerNotExists ContainerPaused ContainerNotStopped ContainerNotRunning // Process errors ProcessNotExecuted // Common errors ConfigInvalid ConsoleExists SystemError )
API error codes.
func (ErrorCode) String ¶
type Factory ¶
type Factory interface { // Creates a new container with the given id and starts the initial process inside it. // id must be a string containing only letters, digits and underscores and must contain // between 1 and 1024 characters, inclusive. // // The id must not already be in use by an existing container. Containers created using // a factory with the same path (and file system) must have distinct ids. // // Returns the new container with a running process. // // errors: // IdInUse - id is already in use by a container // InvalidIdFormat - id has incorrect format // ConfigInvalid - config is invalid // Systemerror - System error // // On error, any partially created container parts are cleaned up (the operation is atomic). Create(id string, config *configs.Config) (Container, error) // Load takes an ID for an existing container and returns the container information // from the state. This presents a read only view of the container. // // errors: // Path does not exist // Container is stopped // System error Load(id string) (Container, error) // StartInitialization is an internal API to libcontainer used during the reexec of the // container. // // Errors: // Pipe connection error // System error StartInitialization() error // Type returns info string about factory type (e.g. lxc, libcontainer...) Type() string }
type NetworkInterface ¶
type NetworkInterface struct { // Name is the name of the network interface. Name string RxBytes uint64 RxPackets uint64 RxErrors uint64 RxDropped uint64 TxBytes uint64 TxPackets uint64 TxErrors uint64 TxDropped uint64 }
type Process ¶
type Process struct { // The command to be run followed by any arguments. Args []string // Env specifies the environment variables for the process. Env []string // User will set the uid and gid of the executing process running inside the container // local to the container's user and group configuration. User string // Cwd will change the processes current working directory inside the container's rootfs. Cwd string // Stdin is a pointer to a reader which provides the standard input stream. Stdin io.Reader // Stdout is a pointer to a writer which receives the standard output stream. Stdout io.Writer // Stderr is a pointer to a writer which receives the standard error stream. Stderr io.Writer // ExtraFiles specifies additional open files to be inherited by the container ExtraFiles []*os.File // Capabilities specify the capabilities to keep when executing the process inside the container // All capabilities not specified will be dropped from the processes capability mask Capabilities []string // contains filtered or unexported fields }
Process specifies the configuration and IO for a process inside a container.
func (*Process) ConsoleFromPath ¶
ConsoleFromPath sets the process's console with the path provided
func (*Process) NewConsole ¶
NewConsole creates new console for process and returns it
func (Process) Pid ¶
Pid returns the process ID
func (Process) Signal ¶
Signal sends a signal to the Process.
func (Process) Wait ¶
func (p Process) Wait() (*os.ProcessState, error)
Wait waits for the process to exit. Wait releases any resources associated with the Process
type Status ¶
type Status int
The status of a container.
const ( // The container exists and is running. Running Status = iota + 1 // The container exists, it is in the process of being paused. Pausing // The container exists, but all its processes are paused. Paused // The container exists, but its state is saved on disk Checkpointed // The container does not exist. Destroyed )
Source Files ¶
console.go container.go error.go factory.go generic_error.go process.go stats.go
Directories ¶
Path | Synopsis |
---|---|
libcontainer/apparmor | |
libcontainer/cgroups | |
libcontainer/cgroups/fs | |
libcontainer/cgroups/systemd | |
libcontainer/configs | |
libcontainer/configs/validate | |
libcontainer/criurpc | Package criurpc is a generated protocol buffer package. |
libcontainer/integration | integration is used for integration testing of libcontainer |
libcontainer/label | |
libcontainer/nsenter | |
libcontainer/seccomp | |
libcontainer/stacktrace | |
libcontainer/system | |
libcontainer/user | |
libcontainer/utils | |
libcontainer/xattr |
- Version
- v0.0.6
- Published
- Dec 11, 2015
- Platform
- js/wasm
- Imports
- 8 packages
- Last checked
- 46 minutes ago –
Tools for package owners.