forked from opencontainers/runtime-spec
-
Notifications
You must be signed in to change notification settings - Fork 0
/
spec_linux.go
152 lines (138 loc) · 5.48 KB
/
spec_linux.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
// +build linux
package specs
// LinuxSpec is the full specification for linux containers.
type LinuxSpec struct {
Spec
// Linux is platform specific configuration for linux based containers.
Linux Linux `json:"linux"`
}
// Linux contains platform specific configuration for linux based containers.
type Linux struct {
// UidMapping specifies user mappings for supporting user namespaces on linux.
UidMappings []IDMapping `json:"uidMappings"`
// UidMapping specifies group mappings for supporting user namespaces on linux.
GidMappings []IDMapping `json:"gidMappings"`
// Rlimits specifies rlimit options to apply to the container's process.
Rlimits []Rlimit `json:"rlimits"`
// Sysctl are a set of key value pairs that are set for the container on start.
Sysctl map[string]string `json:"sysctl"`
// Resources contain cgroup information for handling resource constraints
// for the container.
Resources Resources `json:"resources"`
// Namespaces contains the namespaces that are created and/or joined by the container.
Namespaces []Namespace `json:"namespaces"`
// Capabilities are linux capabilities that are kept for the container.
Capabilities []string `json:"capabilities"`
// Devices are a list of device nodes that are created and enabled for the container.
Devices []string `json:"devices"`
// RootfsPropagation is the rootfs mount propagation mode for the container.
RootfsPropagation string `json:"rootfsPropagation"`
}
// User specifies linux specific user and group information for the container's
// main process.
type User struct {
// Uid is the user id.
Uid int32 `json:"uid"`
// Gid is the group id.
Gid int32 `json:"gid"`
// AdditionalGids are additional group ids set the the container's process.
AdditionalGids []int32 `json:"additionalGids"`
}
// Namespace is the configuration for a linux namespace.
type Namespace struct {
// Type is the type of linux namespace.
Type string `json:"type"`
// Path is a path to an existing namespace persisted on disk that can be joined
// and is of the same type.
Path string `json:"path"`
}
// IDMapping specifies uid/gid mappings.
type IDMapping struct {
// HostID is the uid/gid of the host user or group.
HostID int32 `json:"hostID"`
// ContainerID is the uid/gid of the container's user or group.
ContainerID int32 `json:"containerID"`
// Size is the length of the range of IDs mapped between the two namespaces.
Size int32 `json:"size"`
}
// Rlimit type and restrictions.
type Rlimit struct {
// Type of the rlimit to set.
Type int `json:"type"`
// Hard is the hard limit for the specified type.
Hard uint64 `json:"hard"`
// Soft is the soft limit for the specified type.
Soft uint64 `json:"soft"`
}
type HugepageLimit struct {
Pagesize string `json:"pageSize"`
Limit int `json:"limit"`
}
type InterfacePriority struct {
// Name is the name of the network interface.
Name string `json:"name"`
// Priority for the interface.
Priority int64 `json:"priority"`
}
type BlockIO struct {
// Specifies per cgroup weight, range is from 10 to 1000.
Weight int64 `json:"blkioWeight"`
// Weight per cgroup per device, can override BlkioWeight.
WeightDevice string `json:"blkioWeightDevice"`
// IO read rate limit per cgroup per device, bytes per second.
ThrottleReadBpsDevice string `json:"blkioThrottleReadBpsDevice"`
// IO write rate limit per cgroup per divice, bytes per second.
ThrottleWriteBpsDevice string `json:"blkioThrottleWriteBpsDevice"`
// IO read rate limit per cgroup per device, IO per second.
ThrottleReadIOpsDevice string `json:"blkioThrottleReadIopsDevice"`
// IO write rate limit per cgroup per device, IO per second.
ThrottleWriteIOpsDevice string `json:"blkioThrottleWriteIopsDevice"`
}
type Memory struct {
// Memory limit (in bytes)
Limit int64 `json:"limit"`
// Memory reservation or soft_limit (in bytes)
Reservation int64 `json:"reservation"`
// Total memory usage (memory + swap); set `-1' to disable swap
Swap int64 `json:"swap"`
// Kernel memory limit (in bytes)
Kernel int64 `json:"kernel"`
// How aggressive the kernel will swap memory pages. Range from 0 to 100. Set -1 to use system default.
Swappiness int64 `json:"swappiness"`
}
type CPU struct {
// CPU shares (relative weight vs. other cgroups with cpu shares).
Shares int64 `json:"shares"`
// CPU hardcap limit (in usecs). Allowed cpu time in a given period.
Quota int64 `json:"quota"`
// CPU period to be used for hardcapping (in usecs). 0 to use system default.
Period int64 `json:"period"`
// How many time CPU will use in realtime scheduling (in usecs).
RealtimeRuntime int64 `json:"realtimeRuntime"`
// CPU period to be used for realtime scheduling (in usecs).
RealtimePeriod int64 `json:"realtimePeriod"`
// CPU to use within the cpuset.
Cpus string `json:"cpus"`
// MEM to use within the cpuset.
Mems string `json:"mems"`
}
type Network struct {
// Set class identifier for container's network packets.
ClassID string `json:"classId"`
// Set priority of network traffic for container.
Priorities []InterfacePriority `json:"priorities"`
}
type Resources struct {
// DisableOOMKiller disables the OOM killer for out of memory conditions.
DisableOOMKiller bool `json:"disableOOMKiller"`
// Memory restriction configuration.
Memory Memory `json:"memory"`
// CPU resource restriction configuration.
CPU CPU `json:"cpu"`
// BlockIO restriction configuration.
BlockIO BlockIO `json:"blockIO"`
// Hugetlb limit (in bytes)
HugepageLimits []HugepageLimit `json:"hugepageLimits"`
// Network restriction configuration.
Network Network `json:"network"`
}