139 Commits

Author SHA1 Message Date
Thomas Schubart
4f9e294b8a Add overview of namespaces 2022-02-15 19:57:55 +01:00
utam0k
9b630550a6 docs: Add a diagram of the worksapce architecture to the README.md 2022-02-15 19:57:55 +01:00
Thomas Schubart
4af0e0dfb4 Ensure docker in workspace works with fuse 2022-02-14 10:14:35 +01:00
utam0k
149ca15a1a workspacekit: Enable scmpid check. 2022-02-10 14:13:31 +01:00
Pudong Zheng
0c31ecd7a8 modify supervisor entry to init 2022-02-09 17:35:31 +01:00
mustard
877e8b7fa9 [workspacekit] make /etc/hosts modifiable 2022-02-08 13:28:29 +01:00
Mads Hartmann
dd8b5b728a Remove OWNERS related files
Fixes https://github.com/gitpod-io/ops/issues/844
2022-02-08 09:15:30 +01:00
Thomas Schubart
4eefd2ab71 Switch to our own libseccomp bindings 2022-02-04 08:46:26 +01:00
Christian Weichel
af763f2254 Revert "Bump libseccomp-golang"
This reverts commit bc182ae63aec4be329e40fb4217177cebbeb78ea.
2022-01-20 12:12:12 +01:00
Pavel Tumik
a1505511f3 improve error logging for receiveSeccmpFd
Fixes #7696
2022-01-20 10:49:12 +01:00
Christian Weichel
bc182ae63a Bump libseccomp-golang 2022-01-18 15:07:11 +01:00
Christian Weichel
3fd571bc2a [workspacekit] Don't shadow /.supervisor 2021-12-10 17:11:35 +01:00
Christian Weichel
5494e87450 [workspacekit] Make independent of supervisor 2021-12-10 09:21:35 +01:00
Christian Weichel
cff922bf8a [workspacekit] Make the enclave join ring2 netns 2021-12-08 18:42:33 +01:00
Manuel Alejandro de Brito Fontes
537672b058 Enable experimentalNetwork by default 2021-12-07 16:53:33 +01:00
Christian Weichel
2810f844ab [image-builder-mk3] Add push ring2 proxy 2021-11-12 10:58:09 +01:00
Pudong Zheng
c55bdc265f [supervisor] use internal slirp4netns
Co-authored-by: Christian Weichel <chris@gitpod.io>
2021-11-11 15:06:09 +01:00
Cornelius A. Ludmann
a7166daa72 Set version in Go components during build time 2021-11-11 10:23:08 +01:00
Christian Weichel
c159a86f42 [docker-up] Sligh wrap netns cleanup 2021-11-09 17:47:07 +01:00
Pudong Zheng
53e22ed692 remove slirp4netns in ExperimentalNetwork 2021-11-08 20:13:07 +01:00
Christian Weichel
ec744db335 [workspacekit] Make resolv.conf writeable 2021-10-31 16:06:08 +01:00
Christian Weichel
cc38b8caff [workspacekit] Support workspace-wide netns 2021-10-26 20:42:04 +02:00
Christian Weichel
a996c987ea [workspacekit] Add ring2 enclave support 2021-10-21 21:46:59 +02:00
Manuel Alejandro de Brito Fontes
1854bfae70 Update controller-runtime and k8s go dependencies 2021-10-14 12:14:01 -03:00
Simon Emms
64cb84b1cc [installer]: configure leeway to build installer 2021-10-12 10:44:59 -03:00
Christian Weichel
8efac73cba [prow] Add labels to OWNERS files 2021-10-12 09:01:58 -03:00
Manuel Alejandro de Brito Fontes
7ede29579c Update go dependencies 2021-09-30 11:31:47 -03:00
Manuel Alejandro de Brito Fontes
f25de2cdbf Log error changing default level 2021-09-22 10:15:47 -03:00
Manuel Alejandro de Brito Fontes
46add2414d [workspacekit] Update libseccomp and fuse-overlayfs to latest stable version 2021-09-22 02:53:47 -03:00
Manuel Alejandro de Brito Fontes
9255ef2aa2 [workspacekit] Check if process is already finished during termination 2021-09-19 16:48:44 -03:00
Manuel Alejandro de Brito Fontes
e6d1cea54d Enable GRPC logging 2021-09-13 21:09:39 +05:30
Manuel Alejandro de Brito Fontes
60d5ce3521 [nsinsider] Refactoring to use upstream runc 2021-09-13 16:16:38 +05:30
Manuel Alejandro de Brito Fontes
db6bdba8b9 Improve leeway task to update go modules 2021-09-13 16:14:38 +05:30
Manuel Alejandro de Brito Fontes
e0aad811b5 Update go modules 2021-08-30 02:47:28 -03:00
Manuel Alejandro de Brito Fontes
347ad95d80 Switch from fmt.Errorf to xerrors.Errorf 2021-08-30 02:47:28 -03:00
Manuel Alejandro de Brito Fontes
f7cf8e33e7 Update go dependencies 2021-08-27 12:33:26 -03:00
Christian Weichel
f8f7305896 [workspacekit] Establish IWS conn for proc mounts 2021-08-27 06:51:25 -03:00
Manuel Alejandro de Brito Fontes
2a4f7ddcb2 [workspacekit] Refactor ws-daemon grpc client connection 2021-08-25 17:40:24 +02:00
Manuel Alejandro de Brito Fontes
a1da634398 [ws-daemon] Refactor unmount 2021-08-25 16:09:24 +02:00
Manuel Alejandro de Brito Fontes
f647b66959 [workspacekit] Close lift unix socket on termination 2021-08-23 10:16:22 +02:00
Christian Weichel
8f867ae621 [workspacekit] Don't bogously filter proc mount targets 2021-08-11 21:08:10 +02:00
Manuel Alejandro de Brito Fontes
6e7340dc86 Update k8s dependencies to v1.22.0 2021-08-11 17:31:10 +02:00
Manuel Alejandro de Brito Fontes
877ec7300c [workspacekit] Remove debug log to avoid confusing message 2021-08-11 15:27:10 +02:00
Manuel Alejandro de Brito Fontes
4edfce5ebf Update grpc dependencies
Signed-off-by: Manuel Alejandro de Brito Fontes <aledbf@gmail.com>
2021-08-04 15:49:04 +02:00
Christian Weichel
fe2a87be1e [workspacekit] Don't sleep for debugging by default 2021-08-04 14:59:04 +02:00
Christian Weichel
ff84429aef [workspacekit] Handle mount(sysfs) calls 2021-08-02 10:16:01 +02:00
Manuel Alejandro de Brito Fontes
16659100dc Sync go mod tidy 2021-08-01 21:13:01 +02:00
Christian Weichel
4c5bce0484 [workspacekit] Discover bind mount paths 2021-07-22 20:34:26 +02:00
Christian Weichel
c8eb943822 [prow] Add OWNERS files 2021-07-15 11:29:47 +02:00
Gero Posmyk-Leinemann
8f0c24af66 [ws-manager, supervisor, bridge] Prebuild workspaces are done when their container stops 2021-07-08 09:27:34 +02:00