tag | 333117c347f6cc009258d939dcae7c751a270b08 | |
---|---|---|
tagger | Jess Frazelle <acidburn@microsoft.com> | Sun Jul 15 12:34:57 2018 -0400 |
object | d8a1dd0f3d78482874fa937ecbac66aa849b44e9 |
v0.4.2 -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE1MTdYA1m9lqO/FEeGPNoXAAiv/MFAltLd7EACgkQGPNoXAAi v/Ofsg//XyWi+zCCHCanPNtQmOkVqfY2DhiYOqz4NgKsc/LjY+KWj7+7YcNm+sOF WL9VVu5Yj2Ovdd6eViUnv/+WvZawO4PzQY+mHEwQMnMllGKa9v0BT99CUZPDowS/ WU5GjLi/+0z0tYc2mmVnfSWcREK/RvoBVlbvM+gGGNlDNNPH9RCKZ765zSrI0F8B o73cfX0ca8nv2tEL6LMW9vyC9q/xqBKrjE77ZOx7DyVDul19U1dJ306hu4gW2Nzw 3UzoPTTyNEpBilSlnsxtZpkmFIhnE3EOkS8058DO01GvR0P72wOvDw9reexwfsvA af7GNSZl22HdAInObWZ8kgNJus2xk4rEJCVvjf2bXO845UFecLFKBF/tO9+uJhJR jEALQWMFZTeM8RuyJ+iJ/kEV3CQuc6ZPeZaeK4YwJDh/OALqLzusrMGbJ0EOER5f PVgKeRndLXFRxyBkJZ0imSqpmu0tXinas0VkEIOOjf+/Q/2Gfu351eR3DbaPk1pD AQv0HoAQfmzFUGPXbvpDa8q9xkDCcinF3TD77HCo9mjF07gHgKVOubtDl98UjfFl lJa0LUbGx401bWm/joftP+9W/x6VnSo4AIbEDGpOR9AA2GmqMTGGKjkp24LQaBkv HRfAy+ElotWYTpT1NaUPwG1o7ANA9AGxYyeD8n7UDxls4TrVlG4= =44EL -----END PGP SIGNATURE-----
commit | d8a1dd0f3d78482874fa937ecbac66aa849b44e9 | [log] [tgz] |
---|---|---|
author | Jess Frazelle <acidburn@microsoft.com> | Sun Jul 15 12:34:54 2018 -0400 |
committer | Jess Frazelle <acidburn@microsoft.com> | Sun Jul 15 12:34:54 2018 -0400 |
tree | f68142fe453cd9c2fb8c2fc60720d3092bbcc0a7 | |
parent | c2de21eeb4f18e9e9ae6d3c1955d065073572dee [diff] |
Bump version to v0.4.2 Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
Container introspection tool. Find out what container runtime is being used as well as features available.
For installation instructions from binaries please visit the Releases Page.
$ go get github.com/genuinetools/amicontained
$ amicontained -h amicontained - A container introspection tool. Usage: amicontained <command> Flags: -d enable debug logging (default: false) Commands: version Show the version information.
$ docker run --rm -it r.j3ss.co/amicontained Container Runtime: docker Has Namespaces: pid: true user: true User Namespace Mappings: Container -> 0 Host -> 886432 Range -> 65536 AppArmor Profile: docker-default (enforce) Capabilities: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap Chroot (not pivot_root): false $ docker run --rm -it --pid host r.j3ss.co/amicontained Container Runtime: docker Has Namespaces: pid: false user: false AppArmor Profile: docker-default (enforce) Capabilities: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap Chroot (not pivot_root): false $ docker run --rm -it --security-opt "apparmor=unconfined" r.j3ss.co/amicontained Container Runtime: docker Has Namespaces: pid: true user: false AppArmor Profile: unconfined Capabilities: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap Chroot (not pivot_root): false
$ lxc-attach -n xenial root@xenial:/# amicontained Container Runtime: lxc Has Namespaces: pid: true user: true User Namespace Mappings: Container -> 0 Host -> 100000 Range -> 65536 AppArmor Profile: none Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_tty_config mknod lease audit_write audit_control setfcap syslog wake_alarm block_suspend audit_read Chroot (not pivot_root): false $ lxc-execute -n xenial -- /bin/amicontained Container Runtime: lxc Has Namespaces: pid: true user: true User Namespace Mappings: Container -> 0 Host -> 100000 Range -> 65536 AppArmor Profile: none Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_tty_config mknod lease audit_write audit_control setfcap syslog wake_alarm block_suspend audit_read Chroot (not pivot_root): false
$ sudo systemd-nspawn --machine amicontained --directory nspawn-amicontained /usr/bin/amicontained Spawning container amicontained on /home/genuinetools/nspawn-amicontained. Press ^] three times within 1s to kill container. Timezone UTC does not exist in container, not updating container timezone. Container Runtime: systemd-nspawn Has Namespaces: pid: true user: false AppArmor Profile: none Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_raw ipc_owner sys_chroot sys_ptrace sys_admin sys_boot sys_nice sys_resource sys_tty_config mknod lease audit_write audit_control setfcap Chroot (not pivot_root): false Container amicontained exited successfully.
$ sudo rkt --insecure-options=image run docker://r.j3ss.co/amicontained [ 631.522121] amicontained[5]: Container Runtime: rkt [ 631.522471] amicontained[5]: Host PID Namespace: false [ 631.522617] amicontained[5]: AppArmor Profile: none [ 631.522768] amicontained[5]: User Namespace: false [ 631.522922] amicontained[5]: Capabilities: [ 631.523075] amicontained[5]: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap [ 631.523213] amicontained[5]: Chroot (not pivot_root): false $ sudo rkt --insecure-options=image run --private-users=true --no-overlay docker://r.j3ss.co/amicontained [ 785.547050] amicontained[5]: Container Runtime: rkt [ 785.547360] amicontained[5]: Host PID Namespace: false [ 785.547567] amicontained[5]: AppArmor Profile: none [ 785.547717] amicontained[5]: User Namespace: true [ 785.547856] amicontained[5]: User Namespace Mappings: [ 785.548064] amicontained[5]: Container -> 0 Host -> 229834752 Range -> 65536 [ 785.548335] amicontained[5]: Capabilities: [ 785.548537] amicontained[5]: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap [ 785.548679] amicontained[5]: Chroot (not pivot_root): false
$ sudo unshare --user -r root@coreos:/home/jessie/.go/src/github.com/genuinetools/amicontained# ./amicontained Container Runtime: not-found Has Namespaces: pid: false user: true User Namespace Mappings: Container -> 0 Host -> 0 Range -> 1 AppArmor Profile: unconfined Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read Chroot (not pivot_root): false