gvisor/runsc/boot
Nicolas Lacasse d489336784 runsc: All non-root bind mounts should be shared.
This CL changes the semantics of the "--file-access" flag so that it only
affects the root filesystem.  The default remains "exclusive" which is the
common use case, as neither Docker nor K8s supports sharing the root.

Keeping the root fs as "exclusive" means that the fs-intensive work done during
application startup will mostly be cacheable, and thus faster.

Non-root bind mounts will always be shared.

This CL also removes some redundant FSAccessType validations.  We validate this
flag in main(), so we can assume it is valid afterwards.

PiperOrigin-RevId: 214359936
Change-Id: I7e75d7bf52dbd7fa834d0aacd4034868314f3b51
2018-09-24 17:22:15 -07:00
..
filter Remove getdents from filters 2018-09-12 10:51:25 -07:00
BUILD Remove '--file-access=direct' option 2018-09-07 12:28:48 -07:00
config.go Remove '--file-access=direct' option 2018-09-07 12:28:48 -07:00
controller.go Wait for all async fs operations to complete before returning from Destroy. 2018-09-20 14:37:53 -07:00
debug.go Add 'runsc debug' command 2018-06-20 13:31:31 -07:00
events.go Moved restore code out of create and made to be called after create. 2018-07-18 16:58:30 -07:00
fds.go runsc: Fix stdin/stdout/stderr in multi-container mode. 2018-09-19 22:20:41 -07:00
fs.go runsc: All non-root bind mounts should be shared. 2018-09-24 17:22:15 -07:00
limits.go Make default limits the same as with runc 2018-07-02 12:51:38 -07:00
loader.go runsc: allow `runsc wait` on a container for multiple times. 2018-09-20 16:59:42 -07:00
loader_test.go runsc: Enable waiting on exited processes. 2018-09-17 16:25:24 -07:00
network.go Basic support for ip link/addr and ifconfig 2018-08-08 22:39:58 -07:00
strace.go Check in gVisor. 2018-04-28 01:44:26 -04:00