Cornelius A. Ludmann
|
74f3567c11
|
[ws-daemon] Add nil pointer guard in content initializer for prebuilds
|
2020-12-15 16:36:19 +01:00 |
|
Alex Tugarev
|
7eea67a8a1
|
[ws-daemon] don't fail if prebuilt is not found
|
2020-12-14 14:17:12 +01:00 |
|
Sven Efftinge
|
d0fc7eb84a
|
go mod updates
|
2020-12-10 11:53:43 +01:00 |
|
Christian Weichel
|
4760509b17
|
[content-initialiser] Improve logging and OWI association
|
2020-12-03 14:42:49 +01:00 |
|
Christian Weichel
|
4b919e1b31
|
[ws-daemon] Follow Prometheus naming best practices
|
2020-12-01 15:48:45 +01:00 |
|
Christian Weichel
|
712d1be698
|
[ws-daemon] Reintroduce the working_area_free_bytes metric
|
2020-11-30 17:58:38 +01:00 |
|
Christian Weichel
|
ced1e6ac69
|
[ws-daemon] Add readiness probe
|
2020-11-30 11:06:39 +01:00 |
|
Christian Weichel
|
4ac6416837
|
[ws-daemon] Unblock fixed host source
|
2020-11-27 18:22:32 +01:00 |
|
Christian Weichel
|
0184c98405
|
[registry-facade] Fix fixedIPSource
|
2020-11-27 17:43:34 +01:00 |
|
Christian Weichel
|
8d2002b57b
|
[ws-daemon] Make content initialiser properly shift UID/GIDs
avoids a race between "content ready" and supervisor
/werft https
|
2020-11-27 09:59:36 +01:00 |
|
Christian Weichel
|
a3e24f8e1e
|
[ws-daemon] Don't try to collect empty prebuild
|
2020-11-23 14:17:33 +01:00 |
|
Christian Weichel
|
86e2690270
|
[seccomp-profile] Allow setns
|
2020-11-19 10:02:01 +01:00 |
|
Christian Weichel
|
e89727f677
|
[ws-daemon] Fix snapshot and prebuild remote content init
|
2020-11-18 10:58:59 +01:00 |
|
Christian Weichel
|
7f04181aa9
|
[ws-daemon] Make IWS available before content is initialized
Fixes gitpod-io/gitpod#2188
|
2020-11-17 14:13:30 +01:00 |
|
Christian Weichel
|
5b13a358ed
|
[ws-daemon] Disable dynamic CPU limiting by default (#2168)
Fixes gitpod-io/gitpod#2163
/werft dynamic-cpu-limits
|
2020-11-16 12:32:33 +01:00 |
|
Christian Weichel
|
af411ca867
|
[ws-daemon] Use tar to unarchive backup instead of archive pkg
Fixes #2160
|
2020-11-12 11:05:41 +01:00 |
|
Christian Weichel
|
6e2e96e91d
|
[ws-daemon] Add workaround for containerd ErrNotFound issue
|
2020-11-12 08:52:35 +01:00 |
|
Christian Weichel
|
4bbf614979
|
[ws-daemon] Isolate content initialiser better
|
2020-11-11 12:00:31 +01:00 |
|
Christian Weichel
|
1343b7a915
|
[ws-daemon] Don't fail resource controller if cgroup doesn't exist
Fixes gitpod-io/gitpod#2149
|
2020-11-11 11:39:50 +01:00 |
|
Christian Weichel
|
8778574b98
|
[user-namespaces] Don't require privileged-ws permission anymore
with recent changes this feature is safe enough to no longer require
this permission.
|
2020-11-06 13:53:47 +01:00 |
|
Christian Weichel
|
b914e2df86
|
[ws-daemon] Allow user-namespaced ops only in user-namespaced workspaces
|
2020-11-05 08:08:32 +01:00 |
|
Christian Weichel
|
4dfe2e4521
|
[ws-daemon] Reduce dependency on deprecated syscall package
|
2020-11-05 08:08:32 +01:00 |
|
Christian Weichel
|
34cd879ded
|
[supervisor] Use runc's pivotRoot which properly unmounts the old root
|
2020-11-05 08:08:32 +01:00 |
|
Christian Weichel
|
c8d46111a6
|
[ws-daemon] Improve userns container preparation
|
2020-11-05 08:08:32 +01:00 |
|
Christian Weichel
|
2d692fef08
|
[ws-daemon] Support proc mount API
|
2020-11-05 08:08:32 +01:00 |
|
Christian Weichel
|
973750b4ac
|
[seccomp-profile] Allow more syscalls to supoprt rootless Docker
|
2020-11-04 16:06:12 +01:00 |
|
Anton Kosyakov
|
6b2643ba02
|
fix #2093: don't redirect to blobserver if a req has query or fragment
|
2020-11-03 11:53:31 +01:00 |
|
Christian Weichel
|
33e89cbb69
|
[user namespaces] Fix userns seccomp profile
|
2020-10-28 08:46:58 +01:00 |
|
Christian Weichel
|
ecfa0b4ed6
|
[ws-daemon] Install custom seccomp profile for user namespaced workspace
|
2020-10-28 08:46:58 +01:00 |
|
Christian Weichel
|
92c9494a44
|
[registry-facade] Support daemonSet deployment to ease network load
/werft https=true
/werft ws-feature-flags=registry_facade
|
2020-10-26 08:51:38 +01:00 |
|
Christian Weichel
|
438c234bb2
|
[ws-daemon] Rename InWorkspaceHelper to more apt InWorkspaceService
and introduce rate limiting on that service to mimic the behaviour of
the former canaries.
|
2020-10-23 16:20:08 +02:00 |
|
Christian Weichel
|
4444675ce0
|
[user namespaces] Start IDE and terminals as gitpod user again
|
2020-10-23 16:20:08 +02:00 |
|
Christian Weichel
|
4a9c8f910e
|
[ws-daemon] Provide IWH through unix socket rather than canaries
|
2020-10-23 16:20:08 +02:00 |
|
Christian Weichel
|
5a7903b089
|
[supervisor] Introduce user-namespace rings
|
2020-10-23 16:20:08 +02:00 |
|
Christian Weichel
|
a6a84d0c93
|
[supervisor] Use SIGTERM instead of PreStop hook
|
2020-10-23 16:20:08 +02:00 |
|
Christian Weichel
|
4caab8cb07
|
[ws-daemon] Attempt to unmount shiftfs mark on teardown
|
2020-10-23 16:20:08 +02:00 |
|
Christian Weichel
|
16ae8cc5cf
|
[ws-sync] Provide shiftfs mark mount upon request
|
2020-10-23 16:20:08 +02:00 |
|
Christian Weichel
|
84be881306
|
[ws-daemon] Fix shiftfs-module-loader
|
2020-10-21 15:29:12 +02:00 |
|
Christian Weichel
|
2e3ec08811
|
[supervisor] Provide mock Gitpod API for testing
|
2020-10-21 11:42:31 +02:00 |
|
Christian Weichel
|
8d1664f81f
|
[ws-daemon] Search and replace ws-sync
This should have happened in #2003
/werft https=true
|
2020-10-19 10:26:18 +02:00 |
|
Christian Weichel
|
d1cca07a62
|
[supervisor] Repair BackupService for FWB
/werft https=true
|
2020-10-19 07:46:04 +02:00 |
|
Christian Weichel
|
af40898931
|
[ws-daemon] Support direct validation of helm chart produced config
|
2020-10-19 07:46:04 +02:00 |
|
Christian Weichel
|
75558809c7
|
[go] go mod tidy in all components
|
2020-10-19 07:46:04 +02:00 |
|
Christian Weichel
|
3cbfd6f191
|
[common-go] Move CRI to ws-daemon/container
|
2020-10-19 07:46:04 +02:00 |
|
Christian Weichel
|
7172d822c7
|
[ws-daemon] Fold ws-manager-node into ws-daemon
|
2020-10-19 07:46:04 +02:00 |
|
Christian Weichel
|
6d93dd8348
|
[ws-daemon] Rename ws-sync to ws-daemon
|
2020-10-19 07:46:04 +02:00 |
|