Christian Weichel
cab9957da9
[ws-manager] Make workspace seccomp profile configurable
2020-10-28 08:46:58 +01:00
Christian Weichel
11406fc397
[user namespace] Disable seccomp to make clone work
...
The default containerd seccomp profile seems to prevent the clone
syscall with `CLONE_NEWUSER` and/or `CLONE_NEWNS`.
2020-10-23 16:20:08 +02:00
Christian Weichel
4444675ce0
[user namespaces] Start IDE and terminals as gitpod user again
2020-10-23 16:20:08 +02:00
Christian Weichel
f4e06ea96c
[ws-manager] Set restartPolicy to never
...
ws-manager deletes failed workspace pods and we don't
support failed workspace restarts this way. Kubernetes
trying to restart the container breaks things occasionally.
2020-10-23 16:20:08 +02:00
Christian Weichel
4a9c8f910e
[ws-daemon] Provide IWH through unix socket rather than canaries
2020-10-23 16:20:08 +02:00
Christian Weichel
5a7903b089
[supervisor] Introduce user-namespace rings
2020-10-23 16:20:08 +02:00
Christian Weichel
a6a84d0c93
[supervisor] Use SIGTERM instead of PreStop hook
2020-10-23 16:20:08 +02:00
Christian Weichel
16ae8cc5cf
[ws-sync] Provide shiftfs mark mount upon request
2020-10-23 16:20:08 +02:00
Christian Weichel
7172d822c7
[ws-daemon] Fold ws-manager-node into ws-daemon
2020-10-19 07:46:04 +02:00
Christian Weichel
16cb352b5d
[ws-manager] Apply feature flags only once if specified multiple times
...
There's no guarantee that a ws-manager client will list a feature flag
only once in a `StartWorkspaceRequest`. In fact, the combination of the
`GITPOD_DEFAULT_FEATURE_FLAGS` and a user's persistent feature flags
can lead to duplicate FFs being sent by server. This change makes
ws-manager robust against such cases.
2020-10-13 11:10:53 +02:00
Christian Weichel
2f5cca3ff0
[ws-manager] Provide user namespacing ability using a feature flag
2020-10-13 11:10:53 +02:00
Christian Weichel
1cf441ab78
[ws-manager] Fix workspace container command
...
rather than relying on the gp layer to set the correct one
2020-09-09 09:02:41 +02:00
Christian Weichel
372a3610be
[supervisor] Move from /api to /_supervisor
2020-09-07 09:50:32 +02:00
Christian Weichel
46b091d7ab
[supervisor] Future proof and harmonize the supervisor API
2020-09-07 09:50:32 +02:00
Christian Weichel
3a84d35b36
[ws-manager] Report IDE image as part of the workspace spec
...
Note: this change is not backwards compatible as it makes incompatible
changes to the protocol.
2020-09-04 14:12:06 +02:00
Christian Weichel
757c19a935
[registry-facade] Move from theia version to IDE image
...
This move allows us to specify an IDE docker image at workspace startup,
rather than just selecting from a fixed set of Theia images.
2020-09-04 14:12:06 +02:00
gitpod-init
24f7b609bf
initial commit
2020-08-25 09:25:15 +00:00
