isolator

package module
v0.4.12 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: May 7, 2022 License: MIT Imports: 14 Imported by: 2

README

Isolator

The goal of this library is to run shell commands in isolation using linux namespaces. It may be called from any other program requiring to run some operation inside container.

The goal of this library is not to be compliant with opencontainers spec. It rather provides functionality required in my other projects.

How to use it

Take a look at example/main.go

Features

  • library may be used by other software instantly, it doesn't depend on starting another instance of /proc/self/exe like other libraries do,
  • root permissions are not required to run a container,
  • runs commands inside PID, NS, USER, IPC and UTS namespaces. NET namespace is not used to make an internet available to container instantly,
  • communication is done in JSON format using stdin and stdout as transport layer,
  • logs printed by executed command are transmitted back to the caller,
  • /proc is mounted inside container and populated with in-container processes,
  • /dev is populated with basic devices: null, zero, random, urandom by binding them to those existing on host,
  • tmpfs is mounted on /tmp,
  • DNS inside container is set to 8.8.8.8 and 8.8.4.4 by populating /etc/resolv.conf,
  • library supports mounting custom locations inside container (mounts may be writable or read-only).

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func Start 

func Start(config Config) (c *client.Client, cleanerFn func() error, retErr error)

Start dumps executor to file, starts it, connects to it and returns client

Types

type Config 

type Config struct {
	// Directory where root filesystem exists
	Dir string

	// Executor tores configuration passed to executor
	Executor wire.Config
}

Config stores configuration of isolator

Source Files

View all Source files

Directories

Path Synopsis
wire
cmd
executor command
lib
chroot
docker
libhttp
retry

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.