Uploaded image for project: 'Yetus'
  1. Yetus
  2. YETUS-285

flag to enable/disable docker privileged mode

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Resolved
    • Blocker
    • Resolution: Fixed
    • None
    • 0.2.0
    • Precommit
    • None
    • Hide
      By default, Yetus now runs docker in privileged execution mode (when docker support is enabled).

      To opt instead for the previous behavior, use the cli option {{--dockerprivd=false}}.
      Show
      By default, Yetus now runs docker in privileged execution mode (when docker support is enabled). To opt instead for the previous behavior, use the cli option {{--dockerprivd=false}}.

    Description

      Some commands (such as ps, etc) will use PTRACE in order to perform some operations. In older versions (read: pre-1.10) of Docker, PTRACE is denied by AppArmor on Ubunutu, causing spurious errors. In order to fix this, we should run docker in privileged mode with the capability to disable it. Later on, when 1.10 becomes more common, we can flip the default to false.

      https://github.com/docker/docker/issues/7276 has the gory details.

      Attachments

        1. YETUS-285.00.patch
          2 kB
          Allen Wittenauer
        2. YETUS-285.01.patch
          3 kB
          Allen Wittenauer

        Issue Links

          incorporates

          Bug - A problem which impairs or prevents the functions of the product. YETUS-286 The native build randomly fails with "failed to map segment from shared object"

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Activity

            People

              aw Allen Wittenauer
              aw Allen Wittenauer
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: