tag | fe3ff9cc11e013712c4f4c855a9858930d3ae37e | |
---|---|---|
tagger | Jess Frazelle <acidburn@microsoft.com> | Sun Jul 15 16:49:43 2018 -0400 |
object | f0ea8cedefb967ac75fc7450212b0bbf2a85f623 |
v0.4.3 -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE1MTdYA1m9lqO/FEeGPNoXAAiv/MFAltLs2cACgkQGPNoXAAi v/OGxRAAmSsMNZDO/oBX5b5xxRj9hmzChDuMnG/pDoFRrC5jgnUuyebeHzYcU8xS HHiyhfPEtYK0UOxea6cZKUub5be6MFyiDo1kQK4q/OqqvxWdbSEgl3b0HySW2yov dtKD0HCDjRogs/FdQ/oi7g3sTKRC5e3W9MrN5VkZgjyv9aa1izkiSDhFg5gDa3ml mxQCuf5UW8GMnHrOz4Z3r+1MQSF53oDHTeNoGltpv9nWlPZu9exmSwz61fPaT0Rx /rThXSqMzwZKciH3atysRpeIE21XqnWIbcqnLjontWktLp9vhWf7hgsbuUhO7U69 oz4Y1VPNNhY/7QceXIq1vMOTFa4Tiyis8NF+r2QfmsdoOKWjdNkjciq+GFdl+uXo s96JAS5WToE4kKpoL31iTEMy4o/lPIucPLROaT9oZj85Chc5rThCF/2ySDXKWFi4 xc7X3p7OFw4iOrN6DsP7ZJux/9jTeLidKVMnPEko/ssjqeqT2SmeNTPAxbqs1OT2 CNI5gNUMxSL9+5TfHW/lOWbKpJ7VGBpZvr4Vc2MSW8ZlYA9J+EJ8I1gqqyh/Ur5y fK/cEpmYHLhN6Y+ZB/W786+V5NGmKv2o5fBu2sc5KLBNnobyqa6rdsnN2/ugMKw2 +MTjgtvkp3EtbGn6EkWMAkdg8zw9Wspj/aWxKcFtUg3khJrjg28= =p4a1 -----END PGP SIGNATURE-----
commit | f0ea8cedefb967ac75fc7450212b0bbf2a85f623 | [log] [tgz] |
---|---|---|
author | Jess Frazelle <acidburn@microsoft.com> | Sun Jul 15 16:49:41 2018 -0400 |
committer | Jess Frazelle <acidburn@microsoft.com> | Sun Jul 15 16:49:41 2018 -0400 |
tree | f25672dbec765c790490f1a468aa1a58727c3504 | |
parent | c6889b6112078577e144f634ca81a36079e7e496 [diff] |
Bump version to v0.4.3 Signed-off-by: Jess Frazelle <acidburn@microsoft.com>
Container introspection tool. Find out what container runtime is being used as well as features available.
For installation instructions from binaries please visit the Releases Page.
$ go get github.com/genuinetools/amicontained
$ amicontained -h amicontained - A container introspection tool. Usage: amicontained <command> Flags: -d enable debug logging (default: false) Commands: version Show the version information.
$ docker run --rm -it r.j3ss.co/amicontained Container Runtime: docker Has Namespaces: pid: true user: true User Namespace Mappings: Container -> 0 Host -> 886432 Range -> 65536 AppArmor Profile: docker-default (enforce) Capabilities: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap Chroot (not pivot_root): false $ docker run --rm -it --pid host r.j3ss.co/amicontained Container Runtime: docker Has Namespaces: pid: false user: false AppArmor Profile: docker-default (enforce) Capabilities: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap Chroot (not pivot_root): false $ docker run --rm -it --security-opt "apparmor=unconfined" r.j3ss.co/amicontained Container Runtime: docker Has Namespaces: pid: true user: false AppArmor Profile: unconfined Capabilities: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap Chroot (not pivot_root): false
$ lxc-attach -n xenial root@xenial:/# amicontained Container Runtime: lxc Has Namespaces: pid: true user: true User Namespace Mappings: Container -> 0 Host -> 100000 Range -> 65536 AppArmor Profile: none Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_tty_config mknod lease audit_write audit_control setfcap syslog wake_alarm block_suspend audit_read Chroot (not pivot_root): false $ lxc-execute -n xenial -- /bin/amicontained Container Runtime: lxc Has Namespaces: pid: true user: true User Namespace Mappings: Container -> 0 Host -> 100000 Range -> 65536 AppArmor Profile: none Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_tty_config mknod lease audit_write audit_control setfcap syslog wake_alarm block_suspend audit_read Chroot (not pivot_root): false
$ sudo systemd-nspawn --machine amicontained --directory nspawn-amicontained /usr/bin/amicontained Spawning container amicontained on /home/genuinetools/nspawn-amicontained. Press ^] three times within 1s to kill container. Timezone UTC does not exist in container, not updating container timezone. Container Runtime: systemd-nspawn Has Namespaces: pid: true user: false AppArmor Profile: none Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_raw ipc_owner sys_chroot sys_ptrace sys_admin sys_boot sys_nice sys_resource sys_tty_config mknod lease audit_write audit_control setfcap Chroot (not pivot_root): false Container amicontained exited successfully.
$ sudo rkt --insecure-options=image run docker://r.j3ss.co/amicontained [ 631.522121] amicontained[5]: Container Runtime: rkt [ 631.522471] amicontained[5]: Host PID Namespace: false [ 631.522617] amicontained[5]: AppArmor Profile: none [ 631.522768] amicontained[5]: User Namespace: false [ 631.522922] amicontained[5]: Capabilities: [ 631.523075] amicontained[5]: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap [ 631.523213] amicontained[5]: Chroot (not pivot_root): false $ sudo rkt --insecure-options=image run --private-users=true --no-overlay docker://r.j3ss.co/amicontained [ 785.547050] amicontained[5]: Container Runtime: rkt [ 785.547360] amicontained[5]: Host PID Namespace: false [ 785.547567] amicontained[5]: AppArmor Profile: none [ 785.547717] amicontained[5]: User Namespace: true [ 785.547856] amicontained[5]: User Namespace Mappings: [ 785.548064] amicontained[5]: Container -> 0 Host -> 229834752 Range -> 65536 [ 785.548335] amicontained[5]: Capabilities: [ 785.548537] amicontained[5]: BOUNDING -> chown dac_override fowner fsetid kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap [ 785.548679] amicontained[5]: Chroot (not pivot_root): false
$ sudo unshare --user -r root@coreos:/home/jessie/.go/src/github.com/genuinetools/amicontained# ./amicontained Container Runtime: not-found Has Namespaces: pid: false user: true User Namespace Mappings: Container -> 0 Host -> 0 Range -> 1 AppArmor Profile: unconfined Capabilities: BOUNDING -> chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap mac_override mac_admin syslog wake_alarm block_suspend audit_read Chroot (not pivot_root): false