123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596 |
- package runconfig
- import (
- "fmt"
- "github.com/docker/docker/api/types/container"
- "github.com/docker/docker/pkg/sysinfo"
- )
- // DefaultDaemonNetworkMode returns the default network stack the daemon should
- // use.
- func DefaultDaemonNetworkMode() container.NetworkMode {
- return container.NetworkMode("nat")
- }
- // IsPreDefinedNetwork indicates if a network is predefined by the daemon
- func IsPreDefinedNetwork(network string) bool {
- return !container.NetworkMode(network).IsUserDefined()
- }
- // validateNetMode ensures that the various combinations of requested
- // network settings are valid.
- func validateNetMode(c *container.Config, hc *container.HostConfig) error {
- if hc == nil {
- return nil
- }
- err := validateNetContainerMode(c, hc)
- if err != nil {
- return err
- }
- if hc.NetworkMode.IsContainer() && hc.Isolation.IsHyperV() {
- return fmt.Errorf("Using the network stack of another container is not supported while using Hyper-V Containers")
- }
- return nil
- }
- // validateIsolation performs platform specific validation of the
- // isolation in the hostconfig structure. Windows supports 'default' (or
- // blank), 'process', or 'hyperv'.
- func validateIsolation(hc *container.HostConfig) error {
- // We may not be passed a host config, such as in the case of docker commit
- if hc == nil {
- return nil
- }
- if !hc.Isolation.IsValid() {
- return fmt.Errorf("Invalid isolation: %q. Windows supports 'default', 'process', or 'hyperv'", hc.Isolation)
- }
- return nil
- }
- // validateQoS performs platform specific validation of the Qos settings
- func validateQoS(hc *container.HostConfig) error {
- return nil
- }
- // validateResources performs platform specific validation of the resource settings
- func validateResources(hc *container.HostConfig, si *sysinfo.SysInfo) error {
- // We may not be passed a host config, such as in the case of docker commit
- if hc == nil {
- return nil
- }
- if hc.Resources.CPURealtimePeriod != 0 {
- return fmt.Errorf("Windows does not support CPU real-time period")
- }
- if hc.Resources.CPURealtimeRuntime != 0 {
- return fmt.Errorf("Windows does not support CPU real-time runtime")
- }
- return nil
- }
- // validatePrivileged performs platform specific validation of the Privileged setting
- func validatePrivileged(hc *container.HostConfig) error {
- // We may not be passed a host config, such as in the case of docker commit
- if hc == nil {
- return nil
- }
- if hc.Privileged {
- return fmt.Errorf("Windows does not support privileged mode")
- }
- return nil
- }
- // validateReadonlyRootfs performs platform specific validation of the ReadonlyRootfs setting
- func validateReadonlyRootfs(hc *container.HostConfig) error {
- // We may not be passed a host config, such as in the case of docker commit
- if hc == nil {
- return nil
- }
- if hc.ReadonlyRootfs {
- return fmt.Errorf("Windows does not support root filesystem in read-only mode")
- }
- return nil
- }
|