burble/nomad-driver-containerd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
338 Commits 2 Branches 10 Tags
Commit Graph

338 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Shishir Mahajan
37b6743001 Add support for cpuset_cpus and cpuset_mems 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2023-12-23 10:17:17 +00:00
Simon Marsh
bfbeaaf307
add drone build
All checks were successful
continuous-integration/drone/push Build is passing
Details
2023-12-23 10:13:07 +00:00
Roy Chiu
15d1425368
Merge pull request #151 from Roblox/fix/EECI-4699-update-clabot-workflows 2023-07-05 10:25:36 -07:00
Sourcegraph
50bd5fb6c6 update CLA signature bot workflow 2023-01-18 19:17:22 +00:00
Shishir
4f174572bc
Update golang to 1.19.1. (#146) 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
v0.9.4 		2022-10-12 13:31:11 -07:00
dependabot[bot]
22bbfcd6da
Bump github.com/hashicorp/nomad from 1.1.14 to 1.2.13 (#145) 
Bumps [github.com/hashicorp/nomad](https://github.com/hashicorp/nomad) from 1.1.14 to 1.2.13.
- [Release notes](https://github.com/hashicorp/nomad/releases)
- [Changelog](https://github.com/hashicorp/nomad/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/nomad/compare/v1.1.14...v1.2.13)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/nomad
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-10-12 13:08:52 -07:00
Shishir Mahajan
ea8098f666 Update README.md. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-10-04 13:40:30 -07:00
Shishir Mahajan
704b87edd7 Update README.md: Looking for contributors. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-10-04 13:35:09 -07:00
dependabot[bot]
6fb3f5a2f2
Bump github.com/containerd/containerd from 1.6.1 to 1.6.6 (#138) 
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.6.1 to 1.6.6.

Signed-off-by: dependabot[bot] <support@github.com>
 2022-06-07 13:44:20 -07:00
dependabot[bot]
3da5144ed6
Bump github.com/hashicorp/nomad from 1.1.12 to 1.1.14 (#137) 
Bumps [github.com/hashicorp/nomad](https://github.com/hashicorp/nomad) from 1.1.12 to 1.1.14.
- [Release notes](https://github.com/hashicorp/nomad/releases)
- [Changelog](https://github.com/hashicorp/nomad/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/nomad/compare/v1.1.12...v1.1.14)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/nomad
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-06 12:32:49 -07:00
dependabot[bot]
66d02e19f2
Bump github.com/opencontainers/runc from 1.1.0 to 1.1.2 (#135) 
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.0 to 1.1.2.
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.2/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.0...v1.1.2)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-05-25 10:01:40 -07:00
Shishir
f8bd915016
Upgrade consul to 1.9.17. (#134) 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-05-09 11:44:28 -07:00
Seth Hoenig
d8c2c2fad2
enable compatibility with Nomad in cgroups.v2 mode (#133) 
This PR updates the containerd driver to support changes in how Nomad
manages cgroups when running on a machine using cgroups.v2

- The namespace is now set to "nomad.slice", which containerd uses as
  the cgroup parent.

- The container name is re-oriented to the new naming convention,
  i.e. "<allocID>.<taskName>.scope". This is necessary for Nomad to
  be able to manage the cpuset resource.
 2022-05-09 11:22:38 -07:00
Seth Hoenig
589e162efc
Upgrade build dependencies (#130) 
This PR upgrades dependencies

By updating the go.mod build mode from 1.12 to 1.17 and upgrading
directly imported dependencies, we can eliminate all of the 'replace'
directives that were needed previously.
 2022-03-14 13:30:14 -07:00
Shishir
b7de657f95
Security fix: Upgrade nomad to 1.1.12. (#129) 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-03-08 14:30:09 -08:00
dependabot[bot]
e663a505b7
Bump github.com/containerd/containerd from 1.5.9 to 1.5.10 (#128) 
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.5.9 to 1.5.10.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.5.9...v1.5.10)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-03-04 10:45:30 -08:00
Shishir
d843857be6
Bump version to 0.9.3. (#125) 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-01-21 13:10:23 -08:00
n-marton
c564dd2e58
fix entrypoint override (#124) 
In case of entrypoint override, image config needs to be passed.
v0.9.3 		2022-01-20 10:28:03 -08:00
Shishir
f3c452534d
Fix issue #116 - allow relative paths in mounts. (#123) 
* Fix issue #116 - allow relative paths in mounts.
* Add test.

Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-01-18 16:25:14 -08:00
Shishir
16127ebab2
Security fixes: upgrade containerd + nomad. (#122) 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2022-01-13 15:35:22 -08:00
n-marton
c08ed981d7
add parameter to allow the setting of running user for container (#120) 
* add parameter to allow the setting of running user for container
* use task level user param as source param
 2022-01-13 15:21:27 -08:00
Shishir
e2430d9373
Merge pull request #118 from Roblox/security_fixes 
Security fixes.
 2021-12-09 12:47:46 -08:00
Shishir
38d7d98b17
Merge branch 'master' into security_fixes 2021-12-09 12:37:02 -08:00
Shishir Mahajan
6fb781b3e5 Security fixes. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-12-09 12:30:05 -08:00
Shishir
436c21e2d3
Merge pull request #117 from sha7khan/master 
Enable all devices in privileged mode
 2021-12-06 11:40:04 -08:00
sha7khan
b5840de352
set expected_capabilities=40 when running GHA 2021-12-05 08:58:02 +05:30
sha7khan
ae3c77d578
Enable oci.WithNewPrivileges in privileged mode 2021-12-05 08:53:20 +05:30
sha7khan
32a46614eb
Enable all devices in privileged mode 
The Privileged mode in containerd driver is not adding devices from host device.

This change will make the driver's privileged mode equivalent to ctr tool's privileged mode - https://github.com/containerd/containerd/blob/main/cmd/ctr/commands/run/run_unix.go#L205-L207
 2021-11-23 10:43:40 +05:30
Shishir
bbb554b18f
Merge pull request #115 from Roblox/security_fix 
Security fix: Upgrade consul to 1.10.2.
 2021-10-05 13:54:31 -07:00
Shishir Mahajan
5678bbf4d3 Security fix: Upgrade consul to 1.10.2. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-10-05 13:33:57 -07:00
Shishir
6c61379334
Merge pull request #114 from Roblox/fix_security_issue 
Security fix: Upgrade consul to 1.10.1.
 2021-10-05 12:11:07 -07:00
Shishir Mahajan
1925e4f4eb Security fix: Upgrade consul to 1.10.1. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-10-05 11:46:06 -07:00
Shishir
ba229ecdf7
Merge pull request #113 from Roblox/fix_security_issue 
Security fix: Upgrade containerd to 1.5.7.
 2021-10-05 11:17:52 -07:00
Shishir Mahajan
1557ffea14 Security fix: Upgrade containerd to 1.5.7. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-10-05 10:32:07 -07:00
Shishir
4b2fbc7f8b
Merge pull request #112 from Roblox/bump_version 
Bump version to 0.9.2.
v0.9.2 		2021-09-13 15:03:29 -07:00
Shishir Mahajan
514ce5807d Bump version to 0.9.2. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-09-13 14:53:56 -07:00
Shishir
1f261575d6
Merge pull request #111 from Roblox/security_fix 
Fix CVE-2021-37218.
 2021-09-13 14:23:51 -07:00
Shishir Mahajan
27db80dbe8 Fix CVE-2021-37218. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-09-13 14:08:12 -07:00
Shishir
5168f15971
Merge pull request #110 from Roblox/stdout_stderr_issue 
Fix: Stderr and stdout of existing processes are lost after a restart of nomad
 2021-09-13 14:07:00 -07:00
Shishir Mahajan
7f50f0f598 Fix stdout/stderr pipes issue. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-09-13 11:06:30 -07:00
Shishir
42df527d1f
Merge pull request #109 from Roblox/version_update 
Update golang, nomad, containerd and nerdctl versions
 2021-09-03 10:14:23 -07:00
Shishir Mahajan
42fc67cc80 Update versions, run nomad in non-dev mode and fix tests. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-09-02 16:39:33 -07:00
Shishir
d40a7e36f5
Merge pull request #107 from th0m/tlefebvre/v0.9.1 
Bump version to 0.9.1.
v0.9.1 		2021-08-26 13:17:23 -07:00
Thomas Lefebvre
84aa20f062 Bump version to 0.9.1. 2021-08-26 11:19:03 -07:00
Shishir
1c443d6781
Merge pull request #106 from Roblox/security_fix 
Upgrade containerd to 1.4.8.
 2021-07-26 17:03:14 -07:00
Shishir Mahajan
0ec114bf55
Upgrade containerd to 1.4.8. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-07-26 16:56:12 -07:00
Shishir
fed7fbd9dc
Merge pull request #104 from Roblox/jamesalbert-patch-1 
image size adjustments
 2021-07-16 16:06:24 -07:00
James Albert
117ec3b590
image size adjustments 2021-07-16 15:58:02 -07:00
Shishir
6e150355dd
Merge pull request #102 from Roblox/nerdctl 
Add nerdctl to vagrant VM.
 2021-07-13 16:22:58 -07:00
Shishir Mahajan
496e2d3052
Add nerdctl to vagrant VM. 
Signed-off-by: Shishir Mahajan <smahajan@roblox.com>
 2021-07-13 15:59:52 -07:00