1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556 |
- // +build linux
- package namespaces
- import (
- "encoding/json"
- "os"
- "strconv"
- "github.com/dotcloud/docker/pkg/label"
- "github.com/dotcloud/docker/pkg/libcontainer"
- "github.com/dotcloud/docker/pkg/system"
- )
- // ExecIn uses an existing pid and joins the pid's namespaces with the new command.
- func ExecIn(container *libcontainer.Container, nspid int, args []string) error {
- // TODO(vmarmol): If this gets too long, send it over a pipe to the child.
- // Marshall the container into JSON since it won't be available in the namespace.
- containerJson, err := json.Marshal(container)
- if err != nil {
- return err
- }
- // TODO(vmarmol): Move this to the container JSON.
- processLabel, err := label.GetPidCon(nspid)
- if err != nil {
- return err
- }
- // Enter the namespace and then finish setup
- finalArgs := []string{os.Args[0], "nsenter", strconv.Itoa(nspid), processLabel, string(containerJson)}
- finalArgs = append(finalArgs, args...)
- if err := system.Execv(finalArgs[0], finalArgs[0:], os.Environ()); err != nil {
- return err
- }
- panic("unreachable")
- }
- // NsEnter is run after entering the namespace.
- func NsEnter(container *libcontainer.Container, processLabel string, nspid int, args []string) error {
- // clear the current processes env and replace it with the environment
- // defined on the container
- if err := LoadContainerEnvironment(container); err != nil {
- return err
- }
- if err := FinalizeNamespace(container); err != nil {
- return err
- }
- if err := label.SetProcessLabel(processLabel); err != nil {
- return err
- }
- if err := system.Execv(args[0], args[0:], container.Env); err != nil {
- return err
- }
- panic("unreachable")
- }
|