70 Commits

Author SHA1 Message Date
Anton Kosyakov
573595fdcb [workspacekit] fall back to last successful workspace info on resource exhausted 2023-01-19 13:18:27 +01:00
Christian Weichel
478a75e744 Switch license to AGPL 2022-12-08 13:05:19 -03:00
Manuel Alejandro de Brito Fontes
6bf56dc53b [workspacekit] Fix empty JSON deserialization error 2022-09-22 01:34:22 +02:00
Manuel Alejandro de Brito Fontes
05828a2ee0 Enable configuration of core dumps in .gitpod.yml files 2022-09-21 16:43:22 +02:00
Thomas Schubart
23d87dce09 Disable core dumps 2022-09-21 16:43:22 +02:00
Pavel Tumik @ GitPod
c8c906e278 replace os.IsNotExist with errors.Is(err, fs.ErrNotExist) 2022-08-24 03:35:40 +02:00
Andrew Farries
c4363513a5 Run gofmt
gofmt -w .

From the repository root.
2022-08-08 10:54:52 -03:00
Pavel Tumik
3005ea04b7 fix unhelpful log messages 2022-07-13 04:06:59 +02:00
utam0k
79525bf037 seccomp: support for parallel system calls. 2022-07-05 05:33:52 +05:30
utam0k
3ada54994e seccomp: path the workspace id for logging. 2022-07-05 05:33:52 +05:30
Thomas Schubart
da3de1691e [workspacekit] Expose workspace info 2022-06-28 22:45:37 +05:30
Pavel Tumik
26c17da071 call prestophook.sh from ring1 directly 2022-06-21 12:36:30 +05:30
JenTing Hsiao
9631a0b57b Remove deprecated function
The function grpc.WithInsecure() is deprecated, use
grpc.WithTransportCredentials(insecure.NewCredentials()) instead.

Signed-off-by: JenTing Hsiao <hsiaoairplane@gmail.com>
2022-06-15 13:07:24 +05:30
utam0k
99bb9442a3 workspackit: put the workspace id into seccomp handler's log to trace. 2022-06-03 01:07:51 +05:30
utam0k
f5b1475e7c workspackit: put the workspace id into log to trace. 2022-06-03 01:07:51 +05:30
utam0k
6b5f345e2d workspacekit: Record the errors of connecting to ws-daemon. 2022-05-16 11:56:31 +05:30
Pavel Tumik
791163b5cc [workspacekit] improve logging when not able to connect to daemon 2022-05-12 11:23:27 +05:30
utam0k
a766836727 workspacekitp: Remove slirp4netns codes where it affects the supervisor. 2022-05-10 00:35:25 +05:30
Pavel Tumik
0ffc77d16a PR feedback fixes 2022-05-04 03:08:19 +05:30
Pavel Tumik
301190db53 Add persistent volume support for workspaces
fix
2022-05-04 03:08:19 +05:30
Manuel Alejandro de Brito Fontes
21e549d2ba [workspacekit] Increase rin0 ws-daemon socket timeout 2022-04-26 18:10:38 +05:30
utam0k
fa49f33dfa Use veth instead of slirp4netns while preventing impact on supervisor. 2022-04-11 16:07:24 +05:30
utam0k
f046782319 ws-dameon: implement the SetupPairVeths function. 2022-04-11 16:07:24 +05:30
Anton Kosyakov
b3ea6db43e Revert "ws-dameon: implement the SetupPairVeths function."
This reverts commit a960121dce48a80c3e5919f4fe7f056781ef9504.
2022-04-08 18:19:21 +05:30
Anton Kosyakov
5bdf47767e Revert "ws-daemon: Use a pair of veths instead of slirp4netns"
This reverts commit 4fef102695684ad3e98ed90c7f368d79aa1e304d.
2022-04-08 18:19:21 +05:30
utam0k
4fef102695 ws-daemon: Use a pair of veths instead of slirp4netns
Pod Network Namespace(ring1)
+------------------------------------------------+
|                                                |
|       Workspace Network Namesapce(ring2)       |
| +--------------------------------------------+ |
| |                                            | |
| |              default via veth0             | |
| |                                            | |
| |                                            | |
| |     +------+  +--------------+             | |
| |     |  lo  |  |    ceth0     | 10.0.2.2/24 | |
| |     +------+  +--^--------+--+             | |
| |                  |        |                | |
| +------------------+--------+----------------+ |
|                    |        |                  |
|                 +--+--------v--+               |
|   +-----------> |    veth0     | 10.0.2.1/24   |
|   |             +-----------+--+               |
|   |                         |                  |
|   |          +--------------v-----+            |
|   |          |                    |            |
|   |          |      nftables      |            |
|   |          |   (ip masquerade)  |            |
|   |          +--------------+-----+            |
|   |                         |                  |
|   |   +------+  +-----------v--+               |
|   |   |  lo  |  |     eth0     |               |
|   |   +------+  +--^--------+--+               |
|   |                |        |                  |
|   |          +-----+--------v-----+            |
|   |          |                    |            |
|   +----------+      nftables      |            |
| if with port | (port redirecter)  |            |
|              +-----^--------+-----+            |
|                    |        |                  |
+--------------------+--------+------------------+
                     |        |
                     |        |
                     |        v
                    o u t s i d e
2022-04-08 13:41:21 +05:30
utam0k
a960121dce ws-dameon: implement the SetupPairVeths function. 2022-04-08 13:41:21 +05:30
Christian Weichel
01c257f1e8 [supervisor] Mount custom CA in ring2
if it exists
2022-04-05 21:28:19 +05:30
Thomas Schubart
948080914e Discard log output from slirp4netns 2022-03-16 16:44:23 +05:30
Christian Weichel
4085202362 [workspacekit] Establish ring1 cgroup namespace 2022-03-04 04:08:11 +05:30
Thomas Schubart
4af0e0dfb4 Ensure docker in workspace works with fuse 2022-02-14 10:14:35 +01:00
Pudong Zheng
0c31ecd7a8 modify supervisor entry to init 2022-02-09 17:35:31 +01:00
mustard
877e8b7fa9 [workspacekit] make /etc/hosts modifiable 2022-02-08 13:28:29 +01:00
Pavel Tumik
a1505511f3 improve error logging for receiveSeccmpFd
Fixes #7696
2022-01-20 10:49:12 +01:00
Christian Weichel
cff922bf8a [workspacekit] Make the enclave join ring2 netns 2021-12-08 18:42:33 +01:00
Manuel Alejandro de Brito Fontes
537672b058 Enable experimentalNetwork by default 2021-12-07 16:53:33 +01:00
Christian Weichel
2810f844ab [image-builder-mk3] Add push ring2 proxy 2021-11-12 10:58:09 +01:00
Pudong Zheng
c55bdc265f [supervisor] use internal slirp4netns
Co-authored-by: Christian Weichel <chris@gitpod.io>
2021-11-11 15:06:09 +01:00
Christian Weichel
c159a86f42 [docker-up] Sligh wrap netns cleanup 2021-11-09 17:47:07 +01:00
Pudong Zheng
53e22ed692 remove slirp4netns in ExperimentalNetwork 2021-11-08 20:13:07 +01:00
Christian Weichel
ec744db335 [workspacekit] Make resolv.conf writeable 2021-10-31 16:06:08 +01:00
Christian Weichel
cc38b8caff [workspacekit] Support workspace-wide netns 2021-10-26 20:42:04 +02:00
Christian Weichel
a996c987ea [workspacekit] Add ring2 enclave support 2021-10-21 21:46:59 +02:00
Manuel Alejandro de Brito Fontes
f25de2cdbf Log error changing default level 2021-09-22 10:15:47 -03:00
Manuel Alejandro de Brito Fontes
9255ef2aa2 [workspacekit] Check if process is already finished during termination 2021-09-19 16:48:44 -03:00
Manuel Alejandro de Brito Fontes
e6d1cea54d Enable GRPC logging 2021-09-13 21:09:39 +05:30
Manuel Alejandro de Brito Fontes
347ad95d80 Switch from fmt.Errorf to xerrors.Errorf 2021-08-30 02:47:28 -03:00
Christian Weichel
f8f7305896 [workspacekit] Establish IWS conn for proc mounts 2021-08-27 06:51:25 -03:00
Manuel Alejandro de Brito Fontes
2a4f7ddcb2 [workspacekit] Refactor ws-daemon grpc client connection 2021-08-25 17:40:24 +02:00
Manuel Alejandro de Brito Fontes
a1da634398 [ws-daemon] Refactor unmount 2021-08-25 16:09:24 +02:00