4 Commits

Author SHA1 Message Date
Jing Chen 6666e9fc85 Extract ipv4 address only when starting docker in gVisor.
The address will be used to set up filter rules.

PiperOrigin-RevId: 697883823
2024-11-18 22:55:38 -08:00
Jing Chen 6a506950b3 Start dockerd with the default bridge network in gVisor.
PiperOrigin-RevId: 653309522
2024-07-17 11:48:16 -07:00
Nayana Bidari 29234bc44b Mount cgroups per container in runsc.
Adds support for per container stats in runsc based on cgroups.
1. Removed the 'cgroupfs' config flag.
2. Mounts the cgroups (/sys/fs/cgroup/<controller>) which will be shared
across all containers during root/pause container startup.
3. The container cgroups (eg:/sys/fs/cgroup/controller/<container-id>) are
mounted along with other container mounts before starting the container
process if the cgroups mount is in the spec.

Updates #172

PiperOrigin-RevId: 590752853
2023-12-13 16:47:49 -08:00
Andrei Vagin 1918283b03 Test docker in gVisor
PiperOrigin-RevId: 577322946
2023-10-27 15:41:42 -07:00