mirror of
https://github.com/genuinetools/reg.git
synced 2024-08-21 14:20:23 -04:00
118 lines
2.3 KiB
Go
118 lines
2.3 KiB
Go
![]() |
// +build !windows
|
||
|
|
||
|
package main
|
||
|
|
||
|
import (
|
||
|
"bytes"
|
||
|
"io/ioutil"
|
||
|
"os/exec"
|
||
|
"strings"
|
||
|
|
||
|
"github.com/docker/docker/pkg/parsers/kernel"
|
||
|
"github.com/docker/docker/pkg/sysinfo"
|
||
|
)
|
||
|
|
||
|
var (
|
||
|
// SysInfo stores information about which features a kernel supports.
|
||
|
SysInfo *sysinfo.SysInfo
|
||
|
)
|
||
|
|
||
|
func cpuCfsPeriod() bool {
|
||
|
return testEnv.DaemonInfo.CPUCfsPeriod
|
||
|
}
|
||
|
|
||
|
func cpuCfsQuota() bool {
|
||
|
return testEnv.DaemonInfo.CPUCfsQuota
|
||
|
}
|
||
|
|
||
|
func cpuShare() bool {
|
||
|
return testEnv.DaemonInfo.CPUShares
|
||
|
}
|
||
|
|
||
|
func oomControl() bool {
|
||
|
return testEnv.DaemonInfo.OomKillDisable
|
||
|
}
|
||
|
|
||
|
func pidsLimit() bool {
|
||
|
return SysInfo.PidsLimit
|
||
|
}
|
||
|
|
||
|
func kernelMemorySupport() bool {
|
||
|
return testEnv.DaemonInfo.KernelMemory
|
||
|
}
|
||
|
|
||
|
func memoryLimitSupport() bool {
|
||
|
return testEnv.DaemonInfo.MemoryLimit
|
||
|
}
|
||
|
|
||
|
func memoryReservationSupport() bool {
|
||
|
return SysInfo.MemoryReservation
|
||
|
}
|
||
|
|
||
|
func swapMemorySupport() bool {
|
||
|
return testEnv.DaemonInfo.SwapLimit
|
||
|
}
|
||
|
|
||
|
func memorySwappinessSupport() bool {
|
||
|
return SameHostDaemon() && SysInfo.MemorySwappiness
|
||
|
}
|
||
|
|
||
|
func blkioWeight() bool {
|
||
|
return SameHostDaemon() && SysInfo.BlkioWeight
|
||
|
}
|
||
|
|
||
|
func cgroupCpuset() bool {
|
||
|
return testEnv.DaemonInfo.CPUSet
|
||
|
}
|
||
|
|
||
|
func seccompEnabled() bool {
|
||
|
return supportsSeccomp && SysInfo.Seccomp
|
||
|
}
|
||
|
|
||
|
func bridgeNfIptables() bool {
|
||
|
return !SysInfo.BridgeNFCallIPTablesDisabled
|
||
|
}
|
||
|
|
||
|
func bridgeNfIP6tables() bool {
|
||
|
return !SysInfo.BridgeNFCallIP6TablesDisabled
|
||
|
}
|
||
|
|
||
|
func unprivilegedUsernsClone() bool {
|
||
|
content, err := ioutil.ReadFile("/proc/sys/kernel/unprivileged_userns_clone")
|
||
|
return err != nil || !strings.Contains(string(content), "0")
|
||
|
}
|
||
|
|
||
|
func ambientCapabilities() bool {
|
||
|
content, err := ioutil.ReadFile("/proc/self/status")
|
||
|
return err != nil || strings.Contains(string(content), "CapAmb:")
|
||
|
}
|
||
|
|
||
|
func overlayFSSupported() bool {
|
||
|
cmd := exec.Command(dockerBinary, "run", "--rm", "busybox", "/bin/sh", "-c", "cat /proc/filesystems")
|
||
|
out, err := cmd.CombinedOutput()
|
||
|
if err != nil {
|
||
|
return false
|
||
|
}
|
||
|
return bytes.Contains(out, []byte("overlay\n"))
|
||
|
}
|
||
|
|
||
|
func overlay2Supported() bool {
|
||
|
if !overlayFSSupported() {
|
||
|
return false
|
||
|
}
|
||
|
|
||
|
daemonV, err := kernel.ParseRelease(testEnv.DaemonInfo.KernelVersion)
|
||
|
if err != nil {
|
||
|
return false
|
||
|
}
|
||
|
requiredV := kernel.VersionInfo{Kernel: 4}
|
||
|
return kernel.CompareKernelVersion(*daemonV, requiredV) > -1
|
||
|
|
||
|
}
|
||
|
|
||
|
func init() {
|
||
|
if SameHostDaemon() {
|
||
|
SysInfo = sysinfo.New(true)
|
||
|
}
|
||
|
}
|