moby/daemon
Brian Goff 0e5eaf8ee3 Ensure plugin returns correctly scoped paths
Before this change, volume management was relying on the fact that
everything the plugin mounts is visible on the host within the plugin's
rootfs. In practice this caused some issues with mount leaks, so we
changed the behavior such that mounts are not visible on the plugin's
rootfs, but available outside of it, which breaks volume management.

To fix the issue, allow the plugin to scope the path correctly rather
than assuming that everything is visible in `p.Rootfs`.
In practice this is just scoping the `PropagatedMount` paths to the
correct host path.

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
2018-02-07 15:48:27 -05:00
..
caps Copy Inslice() to those parts that use it 2017-11-10 13:42:38 +08:00
cluster Fix issue of ExitCode and PID not show up in Task.Status.ContainerStatus 2018-01-31 15:35:19 +00:00
config Log active configuration when reloading 2018-01-21 00:56:02 +01:00
discovery Add ineffassign linter 2017-09-08 18:23:21 -04:00
events Update TestLogEvents to not use deprecated Status field 2017-12-20 12:49:51 +01:00
exec Remove libcontainerd.IOPipe 2018-01-09 12:00:28 -05:00
graphdriver Ensure plugin returns correctly scoped paths 2018-02-07 15:48:27 -05:00
initlayer Remove redundant build-tags 2017-12-18 17:41:53 +01:00
links use t.Fatal() to output the err message where the values used for formatting 2017-02-23 10:16:22 +08:00
listeners Remove Solaris files 2017-12-18 17:22:25 +01:00
logger Ensure plugin returns correctly scoped paths 2018-02-07 15:48:27 -05:00
names Move names to a more appropriate package. 2017-09-06 12:05:16 -04:00
network Typo fixed and simple code. 2017-10-18 10:26:58 +08:00
stats Remove redundant build-tags 2017-12-18 17:41:53 +01:00
testdata Remove libtrust dep from api 2017-09-06 12:05:19 -04:00
apparmor_default.go apparmor: make pkg/aaparser work on read-only root 2017-05-18 00:05:13 +10:00
apparmor_default_unsupported.go daemon: switch to 'ensure' workflow for AppArmor profiles 2016-12-07 08:47:28 +11:00
archive.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
archive_tarcopyoptions.go Partial refactor of UID/GID usage to use a unified struct. 2017-06-07 11:44:33 -04:00
archive_tarcopyoptions_unix.go Fix vfs unit test and port VFS to the new IDMappings 2017-06-07 11:44:34 -04:00
archive_tarcopyoptions_windows.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
archive_unix.go LCOW: API change JSON header to string POST parameter 2017-10-06 15:26:48 -07:00
archive_windows.go Remove CopyOnBuild from the daemon. 2017-06-08 15:06:54 -04:00
attach.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
auth.go Add engine-api types to docker 2016-09-07 11:05:58 -07:00
bindmount_unix.go Add functional support for Docker sub commands on Solaris 2016-11-07 09:06:34 -08:00
build.go Address feedback from Tonis 2018-01-18 12:30:39 -08:00
cache.go LCOW: Re-coalesce stores 2018-01-18 08:29:19 -08:00
changes.go Windows: support docker diff 2016-10-28 11:06:54 -07:00
checkpoint.go Don't append the container id to custom directory checkpoints. Fixes #34601. 2017-12-04 14:24:35 -05:00
cluster.go Fix race condition between swarm and libnetwork 2017-05-10 21:16:52 -07:00
commit.go Address feedback from Tonis 2018-01-18 12:30:39 -08:00
configs.go Update logrus to v1.0.1 2017-07-31 13:16:46 -07:00
configs_linux.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
configs_unsupported.go Add Windows configs support 2017-05-16 14:25:32 -07:00
configs_windows.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
container.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
container_linux.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
container_operations.go Fix race in attachable network attachment 2018-02-02 13:46:23 -05:00
container_operations_unix.go Fix secret and config mode issue 2018-01-28 16:21:41 +00:00
container_operations_windows.go Merge pull request #35414 from madhanrm/hotadd1 2018-02-06 10:40:39 -08:00
container_windows.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
create.go Verify NetworkingConfig to make sure EndpointSettings is not nil 2018-01-22 16:31:10 +00:00
create_test.go Verify NetworkingConfig to make sure EndpointSettings is not nil 2018-01-22 16:31:10 +00:00
create_unix.go LCOW: API: Add platform to /images/create and /build 2017-10-06 11:44:18 -07:00
create_windows.go LCOW: API: Add platform to /images/create and /build 2017-10-06 11:44:18 -07:00
daemon.go Fix race in attachable network attachment 2018-02-02 13:46:23 -05:00
daemon_linux.go Update logrus to v1.0.1 2017-07-31 13:16:46 -07:00
daemon_linux_test.go Added validation of isolation settings on daemon.verifyContainerSettings 2017-11-20 10:34:20 +01:00
daemon_test.go Merge pull request #36021 from yongtang/30897-follow-up 2018-01-16 09:38:16 +01:00
daemon_unix.go Daemon: passdown the --oom-kill-disable option to containerd 2018-02-05 03:25:59 +00:00
daemon_unix_test.go Remove solaris build tag and `contrib/mkimage/solaris 2017-11-02 00:01:46 +00:00
daemon_unsupported.go Remove solaris build tag and `contrib/mkimage/solaris 2017-11-02 00:01:46 +00:00
daemon_windows.go Move reload-related functions to reload.go 2018-01-21 00:55:49 +01:00
daemon_windows_test.go Ensure Host Network Service exists 2017-09-25 11:07:44 -07:00
debugtrap_unix.go Update logrus to v1.0.1 2017-07-31 13:16:46 -07:00
debugtrap_unsupported.go Remove solaris build tag and `contrib/mkimage/solaris 2017-11-02 00:01:46 +00:00
debugtrap_windows.go Fix startup logging 2017-10-19 11:09:29 -07:00
delete.go daemon.cleanupContainer: nullify container RWLayer upon release 2018-01-30 18:50:59 -08:00
delete_test.go Move ErrorContains to an internal package. 2017-08-25 12:04:58 -04:00
dependency.go Add config support to executor backend 2017-05-11 10:08:21 -07:00
disk_usage.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
errors.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
events.go Update logrus to v1.0.1 2017-07-31 13:16:46 -07:00
events_test.go LCOW: Remove CommonContainer - just Container 2017-06-20 08:55:46 -07:00
exec.go Merge pull request #35744 from ndeloof/35702 2018-01-19 15:03:50 -08:00
exec_linux.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
exec_windows.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
export.go Address feedback from Tonis 2018-01-18 12:30:39 -08:00
getsize_unix.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
health.go introduce « exec_die » event 2018-01-08 11:42:25 +01:00
health_test.go container: protect the health status with mutex 2017-11-16 15:04:01 -08:00
image.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
image_delete.go Address feedback from Tonis 2018-01-18 12:30:39 -08:00
image_exporter.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
image_history.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
image_inspect.go Address feedback from Tonis 2018-01-18 12:30:39 -08:00
image_pull.go LCOW: Re-coalesce stores 2018-01-18 08:29:19 -08:00
image_push.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
image_tag.go LCOW: Re-coalesce stores 2018-01-18 08:29:19 -08:00
images.go Address feedback from Tonis 2018-01-18 12:30:39 -08:00
import.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
info.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
info_unix.go Use containerd API to get version 2017-11-03 01:46:58 +01:00
info_unix_test.go Refactor "init" version parsing, and add unit-test 2017-04-08 11:28:37 +02:00
info_windows.go api: types: keep info.SecurityOptions a string slice 2016-11-19 13:21:16 +01:00
inspect.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
inspect_linux.go Remove Solaris files 2017-12-18 17:22:25 +01:00
inspect_windows.go Move platform specific mount data to Container 2017-06-23 07:22:47 -07:00
keys.go Change root_maxkeys 2016-06-27 10:23:37 -07:00
keys_unsupported.go change minor mistake of spelling 2016-12-20 21:05:19 +08:00
kill.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
links.go Remove links when remove container 2017-07-18 12:09:26 +08:00
list.go Merge pull request #35938 from yongtang/35931-filter-before-since 2018-01-24 12:06:19 -08:00
list_unix.go Remove solaris build tag and `contrib/mkimage/solaris 2017-11-02 00:01:46 +00:00
list_windows.go stop grabbing container locks during ps 2017-06-23 07:52:31 -07:00
logdrivers_linux.go added logentries driver 2016-10-06 22:48:53 -03:00
logdrivers_windows.go Add gelf log driver plugin to Windows build 2017-10-03 12:42:54 -07:00
logs.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
logs_test.go Add engine-api types to docker 2016-09-07 11:05:58 -07:00
metrics.go Use runtime spec modifier for metrics plugin hook 2018-02-07 15:48:26 -05:00
metrics_unix.go Use runtime spec modifier for metrics plugin hook 2018-02-07 15:48:26 -05:00
metrics_unsupported.go Add support for metrics plugins 2017-05-12 00:30:09 -04:00
monitor.go introduce « exec_die » event 2018-01-08 11:42:25 +01:00
monitor_linux.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
monitor_windows.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
mounts.go Fix issue backporting mount spec to pre-1.13 obj 2017-05-11 12:31:53 -04:00
names.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
network.go Merge pull request #36021 from yongtang/30897-follow-up 2018-01-16 09:38:16 +01:00
oci_linux.go Use proc/exe for reexec 2018-01-26 14:13:43 -05:00
oci_linux_test.go Fix "duplicate mount point" when --tmpfs /dev/shm is used 2017-11-20 18:48:27 -08:00
oci_windows.go Merge pull request #35830 from cpuguy83/unbindable_shm 2018-01-19 17:43:30 -08:00
pause.go Golint: remove redundant ifs 2018-01-15 00:42:25 +01:00
prune.go LCOW: Refactor to multiple layer-stores based on feedback 2018-01-18 08:31:05 -08:00
reload.go Libnetwork revendoring 2018-02-02 14:36:32 -08:00
reload_test.go Libnetwork revendoring 2018-02-02 14:36:32 -08:00
reload_unix.go Move reload-related functions to reload.go 2018-01-21 00:55:49 +01:00
reload_windows.go Move reload-related functions to reload.go 2018-01-21 00:55:49 +01:00
rename.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
resize.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
restart.go Update logrus to v1.0.1 2017-07-31 13:16:46 -07:00
search.go Replace uses of filters.ToParam(), FromParam() with filters.ToJSON(), FromJSON() 2017-09-26 13:59:45 +02:00
search_test.go Remove redundant format 2016-12-27 21:46:52 +08:00
seccomp_disabled.go Replace old oci specs import with runtime-specs 2016-08-17 09:38:34 -07:00
seccomp_linux.go Update logrus to v1.0.1 2017-07-31 13:16:46 -07:00
seccomp_unsupported.go Fix seccomp output in docker info 2016-07-08 17:26:42 -07:00
secrets.go Update logrus to v1.0.1 2017-07-31 13:16:46 -07:00
secrets_linux.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
secrets_unsupported.go Add Windows secrets support 2017-05-16 11:30:06 -07:00
secrets_windows.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
selinux_linux.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
selinux_unsupported.go Rename daemon/utils_*.go to selinux 2015-11-12 15:48:41 -08:00
start.go Merge pull request #35830 from cpuguy83/unbindable_shm 2018-01-19 17:43:30 -08:00
start_unix.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
start_windows.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
stats.go Remove solaris files 2017-10-24 15:39:34 -04:00
stats_collector.go Extract daemon statsCollector to its own package 2017-01-04 18:18:30 +01:00
stats_unix.go Remove string checking in API error handling 2017-08-15 16:01:11 -04:00
stats_windows.go Windows: stats support 2016-09-16 11:56:15 -07:00
stop.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
top_unix.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
top_unix_test.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
top_windows.go Update libcontainerd to use containerd 1.0 2017-10-20 07:11:37 -07:00
trustkey.go Remove libtrust dep from api 2017-09-06 12:05:19 -04:00
trustkey_test.go Remove libtrust dep from api 2017-09-06 12:05:19 -04:00
unpause.go Golint: remove redundant ifs 2018-01-15 00:42:25 +01:00
update.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
update_linux.go Ensure CPU quota/period updates are sent to runc 2018-01-16 11:50:14 -05:00
update_windows.go Remove Solaris files 2017-12-18 17:22:25 +01:00
volumes.go Move api/errdefs to errdefs 2018-01-11 21:21:43 -05:00
volumes_unit_test.go Volume refactoring for LCOW 2017-09-14 12:33:31 -07:00
volumes_unix.go Merge pull request #34224 from estesp/no-chown-nwfiles-outside-metadata 2017-11-02 15:00:42 -07:00
volumes_unix_test.go Spelling fixes 2017-07-03 13:13:09 -07:00
volumes_windows.go Remove redundant build-tags 2017-12-18 17:41:53 +01:00
wait.go Update ContainerWait API 2017-05-16 15:11:39 -07:00
workdir.go Remove error return from RootPair 2017-06-07 11:45:33 -04:00