Sienna Meridian Satterwhite
272ddf17c2
Four bugs fixed in the containerd gRPC executor: - Snapshot parent: resolve image chain ID from content store instead of using empty parent, which created rootless containers with no binaries - I/O capture: replace FIFOs with regular files for stdout/stderr since FIFOs don't work across virtiofs filesystem boundaries (Lima VMs) - Capabilities: grant Docker-default capability set (SETUID, SETGID, CHOWN, etc.) when running as root so apt-get and similar tools work - Shell path: use /bin/sh instead of sh in process args since container PATH may be empty Also adds WFE_IO_DIR env var for shared filesystem support with remote daemons, and documents the remote daemon setup in lib.rs.
32 lines
917 B
TOML
32 lines
917 B
TOML
[package]
|
|
name = "wfe-containerd"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license.workspace = true
|
|
repository.workspace = true
|
|
homepage.workspace = true
|
|
description = "containerd container runner executor for WFE"
|
|
|
|
[dependencies]
|
|
wfe-core = { workspace = true }
|
|
wfe-containerd-protos = { version = "1.5.0", path = "../wfe-containerd-protos", registry = "sunbeam" }
|
|
tokio = { workspace = true }
|
|
serde = { workspace = true }
|
|
serde_json = { workspace = true }
|
|
async-trait = { workspace = true }
|
|
tracing = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
tonic = "0.14"
|
|
tower = "0.5"
|
|
hyper-util = { version = "0.1", features = ["tokio"] }
|
|
prost-types = "0.14"
|
|
uuid = { version = "1", features = ["v4"] }
|
|
sha2 = "0.10"
|
|
tokio-stream = "0.1"
|
|
|
|
[dev-dependencies]
|
|
pretty_assertions = { workspace = true }
|
|
tokio = { workspace = true, features = ["test-util"] }
|
|
tempfile = { workspace = true }
|
|
tokio-util = "0.7"
|