burble/nomad-driver-containerd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Support for adding linux devices (/dev) into the container.

Browse Source 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
This commit is contained in:
Shishir Mahajan 2020-06-26 19:04:42 -07:00
parent e2b4de3ff3
commit 3b0a1ca61c
No known key found for this signature in database
GPG Key ID: D41782E7688DEC4A
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
containerd/containerd.go
View File

@ -56,6 +56,11 @@ func (d *Driver) createContainer(image containerd.Image, containerName, containe
opts = append(opts, oci.WithEnv(env)) opts = append(opts, oci.WithEnv(env))
// Add linux devices into the container.
for _, device := range config.Devices {
opts = append(opts, oci.WithLinuxDevice(device, "rwm"))
}
return d.client.NewContainer( return d.client.NewContainer(
d.ctxContainerd, d.ctxContainerd,
containerName, containerName,

2
containerd/driver.go
View File

@ -74,6 +74,7 @@ var (
"args": hclspec.NewAttr("args", "list(string)", false), "args": hclspec.NewAttr("args", "list(string)", false),
"cap_add": hclspec.NewAttr("cap_add", "list(string)", false), "cap_add": hclspec.NewAttr("cap_add", "list(string)", false),
"cap_drop": hclspec.NewAttr("cap_drop", "list(string)", false), "cap_drop": hclspec.NewAttr("cap_drop", "list(string)", false),
"devices": hclspec.NewAttr("devices", "list(string)", false),
"privileged": hclspec.NewAttr("privileged", "bool", false), "privileged": hclspec.NewAttr("privileged", "bool", false),
"readonly_rootfs": hclspec.NewAttr("readonly_rootfs", "bool", false), "readonly_rootfs": hclspec.NewAttr("readonly_rootfs", "bool", false),
}) })
@ -103,6 +104,7 @@ type TaskConfig struct {
Args []string `codec:"args"` Args []string `codec:"args"`
CapAdd []string `codec:"cap_add"` CapAdd []string `codec:"cap_add"`
CapDrop []string `codec:"cap_drop"` CapDrop []string `codec:"cap_drop"`
Devices []string `codec:"devices"`
Privileged bool `codec:"privileged"` Privileged bool `codec:"privileged"`
ReadOnlyRootfs bool `codec:"readonly_rootfs"` ReadOnlyRootfs bool `codec:"readonly_rootfs"`
} }