Compare commits
15 commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
edc5e6b88d | ||
|
|
43012b5e68 | ||
|
|
8d254efd6c | ||
|
|
45cbacde0c | ||
|
|
1187bd87a2 | ||
|
|
b51e7bdc31 | ||
|
|
b711d7eaa0 | ||
|
|
9ef58561a9 | ||
|
|
03238a41a4 | ||
|
|
a3b0fc721b | ||
|
|
21393396cf | ||
|
|
e7255bdcd3 | ||
|
|
ec89b478e9 | ||
|
|
97b49284bd | ||
|
|
f43c4df792 |
3 changed files with 5 additions and 34 deletions
|
|
@ -1,11 +1,12 @@
|
|||
FROM registry.fedoraproject.org/fedora:rawhide
|
||||
FROM registry.fedoraproject.org/fedora:25
|
||||
|
||||
ENV container=docker FLANNELD_ETCD_ENDPOINTS="http://127.0.0.1:2379" FLANNELD_ETCD_PREFIX="/atomic.io/network"
|
||||
|
||||
ENV VERSION=0 ARCH=x86_64
|
||||
ENV VERSION=0.1 RELEASE=16 ARCH=x86_64
|
||||
LABEL com.redhat.component="flannel" \
|
||||
name="$FGC/flannel" \
|
||||
version="$VERSION" \
|
||||
release="$RELEASE.$DISTTAG" \
|
||||
architecture="$ARCH" \
|
||||
summary="An etcd driven address agent, intended to be run as a system container" \
|
||||
maintainer="Giuseppe Scrivano <gscrivan@redhat.com>" \
|
||||
|
|
@ -15,9 +16,6 @@ RUN dnf -y --setopt=tsflags=nodocs install flannel && dnf clean all
|
|||
|
||||
ADD flanneld-run.sh /usr/bin/
|
||||
|
||||
RUN mkdir -p /exports/hostfs/etc/sysconfig/ && cp /etc/sysconfig/flanneld /exports/hostfs/etc/sysconfig/
|
||||
RUN mkdir -p /exports/hostfs/etc/flanneld
|
||||
|
||||
# System container files
|
||||
COPY tmpfiles.template service.template manifest.json \
|
||||
config.json.template /exports/
|
||||
|
|
|
|||
|
|
@ -23,35 +23,30 @@
|
|||
"cwd": "/",
|
||||
"capabilities": {
|
||||
"bounding": [
|
||||
"CAP_DAC_READ_SEARCH",
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_NET_ADMIN"
|
||||
],
|
||||
"permitted": [
|
||||
"CAP_DAC_READ_SEARCH",
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_NET_ADMIN"
|
||||
],
|
||||
"inheritable": [
|
||||
"CAP_DAC_READ_SEARCH",
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_NET_ADMIN"
|
||||
],
|
||||
"effective": [
|
||||
"CAP_DAC_READ_SEARCH",
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
"CAP_NET_ADMIN"
|
||||
],
|
||||
"ambient": [
|
||||
"CAP_DAC_READ_SEARCH",
|
||||
"CAP_AUDIT_WRITE",
|
||||
"CAP_KILL",
|
||||
"CAP_NET_BIND_SERVICE",
|
||||
|
|
@ -175,27 +170,7 @@
|
|||
"rbind",
|
||||
"rprivate"
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "/etc/sysconfig/flanneld",
|
||||
"destination": "/etc/sysconfig/flanneld",
|
||||
"type": "bind",
|
||||
"options": [
|
||||
"rw",
|
||||
"rbind",
|
||||
"rprivate"
|
||||
]
|
||||
},
|
||||
{
|
||||
"source": "/etc/flanneld",
|
||||
"destination": "/etc/flanneld",
|
||||
"type": "bind",
|
||||
"options": [
|
||||
"rw",
|
||||
"rbind",
|
||||
"rprivate"
|
||||
]
|
||||
}
|
||||
}
|
||||
],
|
||||
"hooks": {},
|
||||
"linux": {
|
||||
|
|
|
|||
|
|
@ -4,12 +4,10 @@
|
|||
echo "[Service]" > /etc/systemd/system/docker.service.d/$NAME.conf
|
||||
echo "EnvironmentFile=-/run/$NAME/docker" >> /etc/systemd/system/docker.service.d/$NAME.conf
|
||||
|
||||
source /etc/sysconfig/flanneld
|
||||
|
||||
# Ensure this file doesn't already exist.
|
||||
rm -f run/flannel/subnet.env
|
||||
|
||||
NOTIFY_SOCKET=/dev/null /usr/bin/flanneld -etcd-endpoints=${FLANNEL_ETCD_ENDPOINTS} -etcd-prefix=${FLANNEL_ETCD_PREFIX} -etcd-cafile=${FLANNEL_ETCD_CAFILE} -etcd-certfile=${FLANNEL_ETCD_CERTFILE} -etcd-keyfile=${FLANNEL_ETCD_KEYFILE} $FLANNEL_OPTIONS &
|
||||
NOTIFY_SOCKET=/dev/null /usr/bin/flanneld &
|
||||
child=$!
|
||||
|
||||
while test \! -e /run/flannel/subnet.env
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue