Compare commits
15 commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
edc5e6b88d | ||
|
|
43012b5e68 | ||
|
|
8d254efd6c | ||
|
|
45cbacde0c | ||
|
|
1187bd87a2 | ||
|
|
b51e7bdc31 | ||
|
|
b711d7eaa0 | ||
|
|
9ef58561a9 | ||
|
|
03238a41a4 | ||
|
|
a3b0fc721b | ||
|
|
21393396cf | ||
|
|
e7255bdcd3 | ||
|
|
ec89b478e9 | ||
|
|
97b49284bd | ||
|
|
f43c4df792 |
3 changed files with 5 additions and 34 deletions
|
|
@ -1,11 +1,12 @@
|
||||||
FROM registry.fedoraproject.org/fedora:rawhide
|
FROM registry.fedoraproject.org/fedora:25
|
||||||
|
|
||||||
ENV container=docker FLANNELD_ETCD_ENDPOINTS="http://127.0.0.1:2379" FLANNELD_ETCD_PREFIX="/atomic.io/network"
|
ENV container=docker FLANNELD_ETCD_ENDPOINTS="http://127.0.0.1:2379" FLANNELD_ETCD_PREFIX="/atomic.io/network"
|
||||||
|
|
||||||
ENV VERSION=0 ARCH=x86_64
|
ENV VERSION=0.1 RELEASE=16 ARCH=x86_64
|
||||||
LABEL com.redhat.component="flannel" \
|
LABEL com.redhat.component="flannel" \
|
||||||
name="$FGC/flannel" \
|
name="$FGC/flannel" \
|
||||||
version="$VERSION" \
|
version="$VERSION" \
|
||||||
|
release="$RELEASE.$DISTTAG" \
|
||||||
architecture="$ARCH" \
|
architecture="$ARCH" \
|
||||||
summary="An etcd driven address agent, intended to be run as a system container" \
|
summary="An etcd driven address agent, intended to be run as a system container" \
|
||||||
maintainer="Giuseppe Scrivano <gscrivan@redhat.com>" \
|
maintainer="Giuseppe Scrivano <gscrivan@redhat.com>" \
|
||||||
|
|
@ -15,9 +16,6 @@ RUN dnf -y --setopt=tsflags=nodocs install flannel && dnf clean all
|
||||||
|
|
||||||
ADD flanneld-run.sh /usr/bin/
|
ADD flanneld-run.sh /usr/bin/
|
||||||
|
|
||||||
RUN mkdir -p /exports/hostfs/etc/sysconfig/ && cp /etc/sysconfig/flanneld /exports/hostfs/etc/sysconfig/
|
|
||||||
RUN mkdir -p /exports/hostfs/etc/flanneld
|
|
||||||
|
|
||||||
# System container files
|
# System container files
|
||||||
COPY tmpfiles.template service.template manifest.json \
|
COPY tmpfiles.template service.template manifest.json \
|
||||||
config.json.template /exports/
|
config.json.template /exports/
|
||||||
|
|
|
||||||
|
|
@ -23,35 +23,30 @@
|
||||||
"cwd": "/",
|
"cwd": "/",
|
||||||
"capabilities": {
|
"capabilities": {
|
||||||
"bounding": [
|
"bounding": [
|
||||||
"CAP_DAC_READ_SEARCH",
|
|
||||||
"CAP_AUDIT_WRITE",
|
"CAP_AUDIT_WRITE",
|
||||||
"CAP_KILL",
|
"CAP_KILL",
|
||||||
"CAP_NET_BIND_SERVICE",
|
"CAP_NET_BIND_SERVICE",
|
||||||
"CAP_NET_ADMIN"
|
"CAP_NET_ADMIN"
|
||||||
],
|
],
|
||||||
"permitted": [
|
"permitted": [
|
||||||
"CAP_DAC_READ_SEARCH",
|
|
||||||
"CAP_AUDIT_WRITE",
|
"CAP_AUDIT_WRITE",
|
||||||
"CAP_KILL",
|
"CAP_KILL",
|
||||||
"CAP_NET_BIND_SERVICE",
|
"CAP_NET_BIND_SERVICE",
|
||||||
"CAP_NET_ADMIN"
|
"CAP_NET_ADMIN"
|
||||||
],
|
],
|
||||||
"inheritable": [
|
"inheritable": [
|
||||||
"CAP_DAC_READ_SEARCH",
|
|
||||||
"CAP_AUDIT_WRITE",
|
"CAP_AUDIT_WRITE",
|
||||||
"CAP_KILL",
|
"CAP_KILL",
|
||||||
"CAP_NET_BIND_SERVICE",
|
"CAP_NET_BIND_SERVICE",
|
||||||
"CAP_NET_ADMIN"
|
"CAP_NET_ADMIN"
|
||||||
],
|
],
|
||||||
"effective": [
|
"effective": [
|
||||||
"CAP_DAC_READ_SEARCH",
|
|
||||||
"CAP_AUDIT_WRITE",
|
"CAP_AUDIT_WRITE",
|
||||||
"CAP_KILL",
|
"CAP_KILL",
|
||||||
"CAP_NET_BIND_SERVICE",
|
"CAP_NET_BIND_SERVICE",
|
||||||
"CAP_NET_ADMIN"
|
"CAP_NET_ADMIN"
|
||||||
],
|
],
|
||||||
"ambient": [
|
"ambient": [
|
||||||
"CAP_DAC_READ_SEARCH",
|
|
||||||
"CAP_AUDIT_WRITE",
|
"CAP_AUDIT_WRITE",
|
||||||
"CAP_KILL",
|
"CAP_KILL",
|
||||||
"CAP_NET_BIND_SERVICE",
|
"CAP_NET_BIND_SERVICE",
|
||||||
|
|
@ -175,27 +170,7 @@
|
||||||
"rbind",
|
"rbind",
|
||||||
"rprivate"
|
"rprivate"
|
||||||
]
|
]
|
||||||
},
|
}
|
||||||
{
|
|
||||||
"source": "/etc/sysconfig/flanneld",
|
|
||||||
"destination": "/etc/sysconfig/flanneld",
|
|
||||||
"type": "bind",
|
|
||||||
"options": [
|
|
||||||
"rw",
|
|
||||||
"rbind",
|
|
||||||
"rprivate"
|
|
||||||
]
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"source": "/etc/flanneld",
|
|
||||||
"destination": "/etc/flanneld",
|
|
||||||
"type": "bind",
|
|
||||||
"options": [
|
|
||||||
"rw",
|
|
||||||
"rbind",
|
|
||||||
"rprivate"
|
|
||||||
]
|
|
||||||
}
|
|
||||||
],
|
],
|
||||||
"hooks": {},
|
"hooks": {},
|
||||||
"linux": {
|
"linux": {
|
||||||
|
|
|
||||||
|
|
@ -4,12 +4,10 @@
|
||||||
echo "[Service]" > /etc/systemd/system/docker.service.d/$NAME.conf
|
echo "[Service]" > /etc/systemd/system/docker.service.d/$NAME.conf
|
||||||
echo "EnvironmentFile=-/run/$NAME/docker" >> /etc/systemd/system/docker.service.d/$NAME.conf
|
echo "EnvironmentFile=-/run/$NAME/docker" >> /etc/systemd/system/docker.service.d/$NAME.conf
|
||||||
|
|
||||||
source /etc/sysconfig/flanneld
|
|
||||||
|
|
||||||
# Ensure this file doesn't already exist.
|
# Ensure this file doesn't already exist.
|
||||||
rm -f run/flannel/subnet.env
|
rm -f run/flannel/subnet.env
|
||||||
|
|
||||||
NOTIFY_SOCKET=/dev/null /usr/bin/flanneld -etcd-endpoints=${FLANNEL_ETCD_ENDPOINTS} -etcd-prefix=${FLANNEL_ETCD_PREFIX} -etcd-cafile=${FLANNEL_ETCD_CAFILE} -etcd-certfile=${FLANNEL_ETCD_CERTFILE} -etcd-keyfile=${FLANNEL_ETCD_KEYFILE} $FLANNEL_OPTIONS &
|
NOTIFY_SOCKET=/dev/null /usr/bin/flanneld &
|
||||||
child=$!
|
child=$!
|
||||||
|
|
||||||
while test \! -e /run/flannel/subnet.env
|
while test \! -e /run/flannel/subnet.env
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue