ddf101d7a2
Interpolate all check related variables
2016-11-08 14:43:46 -08:00
691e09f863
remove debug
2016-11-08 14:21:37 -08:00
9f2c0cb0c2
Interpolate everything that is a string
2016-11-08 14:20:51 -08:00
742e11ddb4
Fix env vars relating to secretdir
2016-11-08 12:28:43 -08:00
a9e9b61216
Merge pull request #1938 from hashicorp/b-docker-reattach
...
Fix Docker container creation and task runner updating
2016-11-04 17:14:40 -07:00
b1a01a9a0f
Add userns_mode docker config option
...
Fixes #1904
2016-11-04 16:53:56 -07:00
0cbd0188b1
Move the wait result to bottom of methods
2016-11-04 14:58:55 -07:00
4741a4b129
Create container much more robust
2016-11-04 14:39:56 -07:00
b08f4e0b97
More recoverable errors
2016-11-02 10:36:04 -07:00
a0340532cb
Forgot to flip a bit
2016-11-01 14:35:22 -07:00
478eebb19b
Merge pull request #1908 from hashicorp/f-vault-docs
...
Vault docs
2016-11-01 12:39:14 -07:00
747c3e7e68
Agent
2016-11-01 10:39:15 -07:00
b84d8212ff
Add LXC docs and enable by default for lxc builds
2016-11-01 10:18:16 -07:00
62f1b98954
Add docker test
2016-10-28 17:53:25 -07:00
6618f7a03d
Fix passing of recoverable error from docker pull
2016-10-28 17:49:46 -07:00
f0e2178790
Making the executor lock the logger
2016-10-28 10:57:35 -07:00
5ddf646615
Don't delete docker images in test
2016-10-27 12:31:53 -07:00
43a670d442
Merge pull request #1877 from hashicorp/b-expand-docker-vols
...
Expand env vars in docker volume paths
2016-10-27 11:32:45 -07:00
b5df74e92e
Merge pull request #1862 from hashicorp/f-rkt-portmap
...
driver.rkt: support network configuration [waiting]
2016-10-27 11:05:55 -07:00
d3835283ca
Expand env vars in docker volume paths
...
Fixes #1876
2016-10-27 11:02:38 -07:00
150b678a6b
Merge pull request #1806 from hashicorp/f-docker4mac-fixes
...
A couple fixes to make Docker For Mac work
2016-10-27 09:29:40 -07:00
f430203505
Put lxc support behind a flag
...
Since lxc support requires linking to a C lib at compile and runtime
I'm putting it behind a build flag to avoid forcing all nomad users to
install liblxc (lxc-dev for development).
2016-10-26 14:55:54 -07:00
067fcda3fe
Making the cli use TLS if the client has enabled TLS
2016-10-26 11:13:53 -07:00
98600b5943
Fix LXC driver interface impls
2016-10-26 10:06:03 -07:00
3c4a27e72b
Fix panic
2016-10-25 17:27:13 -07:00
21b8030ded
Fix tests for rkt port map
2016-10-25 17:06:41 -07:00
18bbfe8325
driver.rkt: add rkt drriver port mapping test
2016-10-25 15:41:49 -07:00
56d91632ca
driver.rkt: support port mapping with net and port options
2016-10-25 15:41:49 -07:00
9d3cdded9a
Merge pull request #1699 from hashicorp/f-lxc-driver
...
LXC Support
2016-10-25 15:17:44 -07:00
b5cc153d54
Added lxc related dependencies
2016-10-25 15:17:02 -07:00
8e07c2750e
Merge pull request #1839 from hashicorp/f-signal-constraints
...
Signal creates an auto-constraints
2016-10-25 11:09:33 -07:00
4f45aece4b
Fingerprint rkt volume support and make periodic
...
Fix rkt docs and custom volume mounting
2016-10-25 09:46:49 -07:00
5d358c7eba
Allow mounting alloc-dir-relative paths in docker
2016-10-25 09:46:49 -07:00
49ed6da0ad
Enable rkt and docker volume mounting by default
2016-10-25 09:46:49 -07:00
f075bda9b9
Make volume name unique
2016-10-25 09:46:49 -07:00
83a11fc93b
Bump minimum required rkt version; update docs
...
Make section names match between docker and rkt
2016-10-25 09:46:49 -07:00
edf657b58a
Fix docker reference in rkt test
2016-10-25 09:46:49 -07:00
02ed35bd1c
Add arbitrary volume support to rkt
2016-10-25 09:46:49 -07:00
473c28824c
Fix standard mounts in rkt and tests
2016-10-25 09:46:49 -07:00
03eba049ed
Merge pull request #1848 from hashicorp/f-vault-error
...
Thread through whether DeriveToken error is recoverable or not
2016-10-24 15:01:18 -07:00
5577e53b20
Merge pull request #1845 from hashicorp/f-remove-disk-usage-acct
...
Remove disk usage enforcement
2016-10-22 19:01:51 -07:00
e85a67a49a
Fix signal test for docker
2016-10-22 18:32:48 -07:00
0070178741
Thread through whether DeriveToken error is recoverable or not
2016-10-22 18:08:30 -07:00
d937d3aede
Fix comment form
2016-10-21 16:56:33 -07:00
285e80ac0f
Remove disk usage enforcement
...
Many thanks to @iverberk for the original PR (#1609 ), but we ended up
not wanting to ship this implementation with 0.5.
We'll come back to it after 0.5 and hopefully find a way to leverage
filesystem accounting and quotas, so we can skip the expensive polling.
2016-10-21 13:55:51 -07:00
41b5679015
Advertise signalling abilities
2016-10-19 15:06:23 -07:00
ae1ea0e5ba
Actually mount the local directory
2016-10-18 15:57:12 -07:00
36cfe6e89e
Large refactor of task runner and Vault token rehandling
2016-10-18 11:24:20 -07:00
53eeec9bc1
Merge pull request #1801 from hashicorp/f-signals
...
Consul-template signal change mode
2016-10-18 11:23:47 -07:00
34f7cbd10f
Disable lxc by default
2016-10-13 13:22:12 -07:00
1dbb2b7164
Cleanup comments/whitespace
2016-10-13 13:05:55 -07:00
38b2020291
Mount secret dir
2016-10-13 12:45:33 -07:00
4e86a5f906
throwing an error if stats line can't be converted to k/v pair
2016-10-12 17:18:58 -07:00
ea5d9d959a
Bind mounting alloc dir into container
2016-10-12 17:18:58 -07:00
6312ea3f8f
Setting the network type
2016-10-12 17:18:58 -07:00
ce334e0e04
Adding cpu resource limits
2016-10-12 17:18:58 -07:00
bb2a580ef1
Implemented an LXC Driver
2016-10-12 17:18:58 -07:00
8864a506aa
Disable the syslog logging system on Docker For Mac
...
The syslog logging system depends on the ability for a unix socket to be
accessed by the docker daemon in the $TMPDIR of the host. This doesn't
work on Docker For Mac because the docker daemon is running inside a VM,
and while /tmp is accessible, the filesystem used to share them doesn't
support unix socket files, and thus it doesn't work.
2016-10-12 17:07:21 -07:00
eec1a154ec
add plugin kill
2016-10-12 13:24:22 -07:00
86238387e7
Send Executor Ctx separately
2016-10-12 11:35:29 -07:00
ca5439eca1
Add NOMAD_JOB_NAME to environment
2016-10-11 11:20:42 -07:00
bc35eaee21
Task runner sends signals
2016-10-10 15:09:00 -07:00
00a1234c55
Executor + Java/Raw Exec/Exec
2016-10-10 11:47:04 -07:00
5b01b1be1b
Rkt
2016-10-10 11:47:04 -07:00
280af8f4d1
Docker + Qemu
2016-10-10 11:47:04 -07:00
f0d04bd798
Add comment and fix log line code style
2016-10-07 11:58:21 -07:00
523dbfcc81
Remove VolumesFrom feature
...
Since containers are named with alloc ids it's difficult to use safely.
Not to mention task scheduling ordering issues could break it as well.
2016-10-07 11:58:13 -07:00
f777faba00
Add comments to config key constants
2016-10-03 16:04:33 -07:00
0d66b8aef0
Only launch syslog server if container uses syslog
2016-10-03 15:22:10 -07:00
44219cc083
Put docker volume support behind conf flag
...
Also add tests and fix bug with logging driver configuration.
2016-10-03 15:02:50 -07:00
a26a501120
Fixed a bug when giving in another logging driver than syslog.
...
Before this commit, if the Logging config did not contain a logging option "syslog-address", it would definitely insert this option.
If then, you decide to take another logdriver than syslog, docker would fail because it received a wrong log option for the selected driver.
Now, nomad will only insert the syslog address in a hard way if there are no logging options at all - this way it keeps the default nomad settings.
2016-10-03 15:02:50 -07:00
6c7cbe5fcb
Added support to mount host folders into container. For example if you don't want to bake certificates into the container, you can mount them into the directory directly.
...
Furthermore, I added support for volumes-from.
Currently, there is no support to move the data from one container to another, hence: If a container spawns on another host, it is very likely, that the data will not be found.
2016-10-03 15:02:49 -07:00
ac5cde4641
Added logging options support for docker driver
2016-10-03 15:02:49 -07:00
320b89d57a
Constant time space tracking of pids
2016-09-27 16:57:26 -07:00
b28e817b1d
Test fix
2016-09-26 15:35:59 -07:00
12de69a66f
Struct and parse
2016-09-21 11:31:09 -07:00
50efdb00e9
Merge pull request #1713 from hashicorp/f-alloc-runner-vault
...
Vault integration in client
2016-09-20 16:15:55 -07:00
0fefaef008
Alloc runner tests
2016-09-15 17:24:09 -07:00
6702a29071
Vault token threaded
2016-09-14 13:30:01 -07:00
0f77d81f7d
Merge pull request #1683 from mwieczorek/enable-syslog-for-windows
...
Enable syslog for windows
2016-09-04 17:07:25 -07:00
94071fc294
Enable syslog server and universal collector for windows
2016-09-05 00:26:36 +02:00
eef786dd9d
Secret dir materialized in alloc/task directory
2016-09-02 12:44:05 -07:00
2c8dd8bbd3
Revert "Introduce a Secret/ directory"
2016-09-01 17:23:15 -07:00
1ed454dd60
Merge pull request #1671 from hashicorp/f-secret-dir2
...
Introduce a Secret/ directory
2016-09-01 09:56:17 -07:00
5d3b47e648
Address comments and reserve
2016-08-31 18:11:02 -07:00
0626eb9619
environment variables
2016-08-31 13:56:11 -07:00
d59e14eed4
Interface + tests
2016-08-30 21:40:32 -07:00
32626ac608
Remove unused embedded lock on ExecContext
2016-08-26 11:58:03 -07:00
e9b27a528c
Fixed the raw_exec fingerprint test
2016-08-24 13:38:43 -05:00
10e10b2fe1
fixed the qemu fingerprinter test
2016-08-24 12:25:02 -05:00
9309247f9d
Fixed a java test
2016-08-23 16:51:09 -05:00
05fe72e89e
fixed the exec fingerprinter test
2016-08-23 16:40:56 -05:00
588a4802c1
removing driver_mock
2016-08-23 16:05:03 -05:00
0f3ec9c759
Fix TestDockerDriver_Fingerprint
2016-08-23 10:39:40 -07:00
1da8566322
Merge pull request #1580 from hashicorp/f-disk-usage-monitoring
...
Monitor and enforce shared allocation directory disk usage
2016-08-23 09:49:53 -07:00
1e1eef56a1
Putting the mock driver behind a build flag
2016-08-22 15:02:28 -05:00
4ca623bcfe
blocking chained allocations until previous allocation hasn't terminated
2016-08-22 11:34:24 -05:00
b06c6d9311
driver.docker: tiny: debug messages output task name instead of image name
2016-08-21 19:51:32 +09:00
2a17895a83
Disk resource monitoring and enforcement
2016-08-18 07:59:03 +02:00
dc0e395982
re-using copyimage
2016-08-17 15:25:03 -07:00
0d7cd53c63
Fixed docker tests
2016-08-17 15:25:03 -07:00
ab7f8847c1
changing error statement
2016-08-17 13:48:31 -07:00
2968ce9399
Fixed the docker script check
2016-08-17 13:23:48 -07:00
3b9188fcf0
Merge pull request #1598 from nak3/rkt-fix5
...
driver.rkt: Remove unnecessary job validation
2016-08-16 15:12:45 -07:00
c97beb8deb
driver.rkt: Remove unnecessary job validation
2016-08-16 23:33:34 +09:00
4f18963a97
go fmt performed code when copied from another directory got messed up again ? Ok, ran go fmt again
2016-08-16 09:20:13 -04:00
17b902f20f
issue-1588 : Allow extra driver config args as a passthrough for qemu executable from a task specification
2016-08-15 23:36:13 -04:00
64b86bed0d
Merge pull request #1581 from nak3/fix-rkt2
...
Set host environment variables to taskEnv of rkt driver
2016-08-15 10:31:10 -07:00
a2b603bd82
Merge pull request #1586 from nak3/rkt-fix3
...
tiny: Catch error returned from SyncServices in rkt driver
2016-08-15 10:29:28 -07:00
d0ccdacd08
rkt.driver: Fix wrong MB calculation
2016-08-14 14:27:42 +09:00
906526fbe0
tiny: Catch error returned from SyncServices in rkt driver
2016-08-14 13:11:17 +09:00
0efc0e0231
Set host environment variables to taskEnv of rkt driver
2016-08-14 00:42:53 +09:00
8c8d00dd5b
Merge pull request #1572 from hashicorp/fix-docker-test
...
Fixed docker tests
2016-08-12 13:04:33 -07:00
f3420c65e3
Updated the busybox images
2016-08-12 11:39:58 -07:00
dd7e69006e
Not running tests parallal
2016-08-11 21:53:27 -07:00
b34d65f1a5
Update test.sh
2016-08-11 21:35:50 -07:00
839ecd1df6
Fixed docker tests
2016-08-11 19:28:41 -07:00
b3dca54a1a
Wrap file rotator tests in wait for
2016-08-11 19:23:03 -07:00
b71f687f62
Merge pull request #1413 from hashicorp/b-tests
...
Fix flaky tests
2016-08-11 18:15:29 -07:00
9a75052d2c
Merge pull request #1518 from pubnub/feature/chroot-map-rebase
...
Add config field to specify chroot mapping for exec driver
2016-08-10 17:00:03 -07:00
6ec6c27cb4
Update debug option from string to bool
2016-08-09 16:51:00 +09:00
11a8a7218e
Add debug option to rkt task config
2016-08-09 09:01:05 +09:00
09113ffbc8
Fix Linux executor isolation test
...
- Properly expects the hard-coded mounts (alloc, dev, and proc) and hardcoded local directories (local and tmp)
- Also verifies that etc contains only the requested paths
2016-08-08 14:04:09 -07:00
fb178a1f5f
Merge pull request #1477 from nak3/add-syslog_server-test
...
Add Syslog server start shutdown test
2016-08-05 12:01:24 -07:00
ddd8adce96
changelog + use driver config
2016-08-05 10:55:20 -07:00
f8e4bc73c9
Merge pull request #1493 from nak3/rkt-fix1
...
Pass command and trust_prefix to the validation of rkt task configuration
2016-08-05 10:52:02 -07:00
096956257d
changelog
2016-08-05 10:47:44 -07:00
fc1195b7ea
Add Syslog server start shutdown test
2016-08-06 02:01:33 +09:00
b688261a99
Set windows containers default network mode to 'nat'
2016-08-05 06:01:26 +02:00
2ae059b41d
Address review comments
...
- Simplify map length check in Linux Executor
- Added a `chroot_env` test for config parser
- Moved `ChrootEnv` field from ExecutorCommand to ExecutorContext
- Added a test for `chroot_env` functionality
2016-08-04 15:33:06 -07:00
531b619ce4
Merge pull request #1475 from mwieczorek/windows-hostIp-portBindings
...
Empty host ip for windows containers port bindings
2016-08-04 13:30:43 -07:00
1fe4158097
Merge pull request #1519 from vrenjith/master
...
Remove docker volumes while removing container
2016-08-04 12:54:00 -07:00
24e8f752ab
Add chroot_env to Java driver (which uses the exec driver internally)
2016-08-04 11:15:35 -07:00
cd12645e4c
Add TestRktTaskValidate
2016-08-04 23:15:13 +09:00
bf27963903
Add TestRktTrustPrefix
2016-08-04 17:26:10 +09:00
1176fd123e
Pass command and trust_prefix to the validation of rkt task configuration
2016-08-04 17:24:56 +09:00
41cf7cc623
Update docker.go
...
Remove container volumes
2016-08-04 11:43:50 +05:30
4e603e1306
Update checks_test.go
...
Remove docker volumes while exiting container
2016-08-04 11:42:47 +05:30
7df692226a
Add config field to specify chroot mapping for exec driver
...
- Same format as used by the internal chroot mapping
- Map: source_path -> dest_path
- Example HCL:
client {
chroot_env {
"/etc" = "/etc"
"/lib" = "/lib"
"/opt/projects/foo/bin" = "/usr/bin"
}
}
2016-08-03 17:17:17 -07:00
0727db4ca0
Test configuration of Docker working directory
2016-08-03 16:35:49 +02:00
d91f7dbdf8
Docker driver: allow to configure working directory
2016-08-03 16:18:15 +02:00
47f5c8f523
use priviledge of the config
2016-08-02 16:10:15 -07:00
cec6d8a1eb
remove gating of ipc, user ns and pidmode based on hosts priviledge mode config
2016-08-02 16:02:34 -07:00
2999c12ef1
disable swap
2016-07-28 12:17:00 -07:00
4b82b6c3d4
Empty host ip for windows containers port bindings
2016-07-28 00:00:57 +02:00
22af229cef
Merge pull request #1321 from mwieczorek/f-windows-binds
...
Volume binds for windows containers
2016-07-18 10:20:44 -06:00
807bf3cf6c
tests wait for the container to start
2016-07-12 11:36:06 -06:00
e1d68f3e9b
Docker host network test
2016-07-12 10:59:34 -06:00
ed3be34105
Introduced an env var for rkt tests
2016-07-11 15:48:16 -06:00
4e0b621ffa
Skipping travis tests and not installing rkt on travis
2016-07-11 15:10:09 -06:00
a9b3f5e552
Alpha-sort the build platforms
2016-07-11 12:23:46 -07:00
267198742f
Merge branch 'master' into f-resource-isolation-fingerprinter
2016-07-11 12:23:09 -07:00
e2909db9ef
Merge pull request #1388 from novilabs/support-docker-syslog-unixformat-and-defaultformat
...
Support docker syslog unixformat and defaultformat
2016-07-11 11:17:30 -07:00
f11b1ce079
Get windows to build
2016-07-11 11:52:41 -06:00
9966169596
Merge branch 'f-resource-isolation-cleanup' into f-resource-isolation-fingerprinter
2016-07-11 00:10:21 -07:00
d20c5fc327
Merge pull request #1402 from hashicorp/f-resource-isolation-cleanup
...
Resource isolation cleanup
2016-07-11 02:09:35 -05:00
be272168c7
Rename resourceContainer{,Context} and resCon{,Ctx}.
2016-07-11 00:02:55 -07:00
1c14e01ac0
Add a comment describing IsolationConfig
2016-07-10 23:45:44 -07:00
2983bd6fce
Fix test for non-Linux platforms.
...
The following tests now check a whitelist for whether or not their
driver is present or not, or if the OS is supported or not.
* `TestAllocDir_MountSharedAlloc`
* `TestClient_Drivers_InWhitelist` (`exec` driver)
* `TestClient_Drivers` (`exec` driver)
* `TestJavaDriver_Fingerprint` (`java` driver)
2016-07-10 15:19:49 -07:00
d4fe69ddf9
Update comments and pushdown a lock into the resource container
2016-07-10 00:12:59 -07:00
fc9cd8d4af
Push down the Linux-specific bits into resourceContainer
2016-07-10 00:06:53 -07:00
6fc269d2a6
Move unit tests around into per-platform where appropriate.
2016-07-09 23:56:31 -07:00
a5dc6c2da9
Push the Client's cleanup of Cgroups down
2016-07-09 23:45:33 -07:00
5dbc0bf382
Rename resourceContainer.cleanup() to executorCleanup()
...
Not to be confused with the imminent ClientCleanup().
2016-07-09 23:25:33 -07:00
5f8f0a50ac
Begin cgroup pushdown into platform specific files
2016-07-09 23:01:14 -07:00
e5310b76a6
Merge pull request #1399 from hashicorp/b-exec-cleanup
...
WIP: Cleanup exec driver
2016-07-09 00:08:43 -07:00
7530b27014
Move all non-Linux Fingerprinter items to the default exec driver
2016-07-08 18:35:46 -07:00
5d61fa01f1
Fixed tests
2016-07-08 18:27:51 -07:00
3c4002c48b
Fixed the client tests
2016-07-08 17:49:58 -07:00
1784d98182
Fixed the host port environment variable
2016-07-08 15:37:44 -07:00
921a6c889c
remove the expected leading space, after the colon in syslog
2016-07-06 11:08:24 -05:00
07a9e15560
get into the hour minute second part of the time before looking for spaces, and then looking for the : seperator
2016-07-06 11:08:24 -05:00
a73422b4ff
Fix docker driver lockup during nomad boot
...
Unit mismatch caused docker driver to wait almost indefinitely during boot
(when one or more containers were a bit uncooperative during StopContainer())
This should fix problems described in #1202
2016-06-28 14:26:47 +02:00
0a10873aa6
Merge pull request #1335 from hashicorp/f-set-docker-timeout
...
Setting a timeout in the docker client
2016-06-21 17:00:14 -07:00
2837d3395d
Setting a timeout in the docker client
2016-06-21 16:58:21 -07:00
1d5c5b18f3
Making SSL default
2016-06-21 16:41:14 -07:00
661dc200f3
Make line copy to avoid being overriden by subsequent scans
2016-06-20 13:14:43 -07:00
67a04bb1cc
Volume binds for windows containers
2016-06-20 21:46:33 +02:00
c9f7467ccb
Driver tests use client default config
2016-06-17 14:24:49 -07:00
7b9961f09b
Initialize the stats helpers before accessing them for the first time
2016-06-17 13:23:30 -07:00
27c6398639
debug message when stopping container
2016-06-17 11:52:44 -07:00
266c417ac8
Changed the client options for docker volume selinux labels
2016-06-16 21:41:02 +01:00
fa216199ce
Added documentation
2016-06-15 02:42:15 +02:00
e08083acfe
Added a client options for setting selinux options
2016-06-15 02:33:09 +02:00
4b04e503f3
address comments
2016-06-13 17:32:18 -07:00
8bbf4a55e5
Fix IDs and domain scoping
2016-06-13 16:30:58 -07:00
d019d8ef8e
implemented reconciliation of unwanted services
2016-06-13 14:52:26 +02:00
232654cdee
register checks
2016-06-12 21:28:56 -07:00
a82c2bb058
Do not reconcile in client and cleanup executor a bit
2016-06-12 18:22:07 -07:00
8e231fa382
Rename ConsulService back to Service
2016-06-12 16:36:49 -07:00
e931b42473
unify cli output
2016-06-12 13:16:07 -07:00
6ef4bfd6bf
skip docker test if no docker found
2016-06-12 11:28:43 -07:00
2628827b7c
Merge pull request #1262 from hashicorp/remove-artifact-check
...
Removing artifact check for java and qemu drivers
2016-06-12 11:21:18 -07:00
c4a819528a
Merge pull request #1260 from hashicorp/f-alloc-stats-struct
...
Allocation resources returned in a struct
2016-06-12 11:18:57 -07:00
34f85baab0
Fix the calculation of total ticks for docker and exec
2016-06-12 18:08:35 +02:00
beb362e202
Setting a flag to indicate whether fs isolation is indeed happening
2016-06-12 15:43:24 +02:00
641cf50682
Not converting the abs path relative to task dir for drivers which enforce FS isolation only in linux
2016-06-12 13:54:30 +02:00
e952540f6f
Allocation resources returned in a struct
2016-06-11 21:04:10 -07:00
2f036231e5
Merge pull request #1201 from hashicorp/f-dyn-server-list
...
Dynamic Server Lists/Client Bootstrapping via consul.
2016-06-11 18:58:25 -04:00
445783889b
Remove default values and use nil for the executor. Much better.
2016-06-11 17:52:09 -04:00
Alex Dadgar