From c0927d8dadc571f918a7718d36ab6bd15afc0829 Mon Sep 17 00:00:00 2001 From: Brandon Philips Date: Thu, 13 Mar 2014 23:56:50 -0700 Subject: [PATCH] feat(app-emulation/docker): use btrfs with symlink-usr --- .../docker/docker-0.9.0-r1.ebuild | 215 ++++++++++++++++++ .../docker/files/symlink-usr/docker.service | 13 ++ 2 files changed, 228 insertions(+) create mode 100644 sdk_container/src/third_party/coreos-overlay/app-emulation/docker/docker-0.9.0-r1.ebuild create mode 100644 sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/symlink-usr/docker.service diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/docker-0.9.0-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/docker-0.9.0-r1.ebuild new file mode 100644 index 0000000000..077cc2decd --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/docker-0.9.0-r1.ebuild @@ -0,0 +1,215 @@ +# Copyright 1999-2014 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: $ + +EAPI=5 + +DESCRIPTION="Docker complements kernel namespacing with a high-level API which operates at the process level." +HOMEPAGE="https://www.docker.io/" + +GITHUB_URI="github.com/dotcloud/docker" + +if [[ ${PV} == *9999 ]]; then + SRC_URI="" + EGIT_REPO_URI="git://${GITHUB_URI}.git" + inherit git-2 + KEYWORDS="" +else + SRC_URI="https://${GITHUB_URI}/archive/v${PV}.zip -> ${P}.zip" + DOCKER_GITCOMMIT="2b3fdf2" + KEYWORDS="amd64" + [ "$DOCKER_GITCOMMIT" ] || die "DOCKER_GITCOMMIT must be added manually for each bump!" +fi + +inherit bash-completion-r1 linux-info systemd udev user + +LICENSE="Apache-2.0" +SLOT="0" +IUSE="aufs btrfs +device-mapper doc lxc vim-syntax zsh-completion symlink-usr" + +# TODO work with upstream to allow us to build without lvm2 installed if we have -device-mapper +CDEPEND=" + >=dev-db/sqlite-3.7.9:3 + sys-fs/lvm2[thin] +" +DEPEND=" + ${CDEPEND} + >=dev-lang/go-1.2 + >=sys-fs/btrfs-progs-0.20 + dev-vcs/git + dev-vcs/mercurial + doc? ( + dev-python/sphinx + dev-python/sphinxcontrib-httpdomain + ) +" +RDEPEND=" + ${CDEPEND} + !app-emulation/docker-bin + >=net-firewall/iptables-1.4 + lxc? ( + >=app-emulation/lxc-0.8 + ) + >=dev-vcs/git-1.7 + >=app-arch/xz-utils-4.9 + aufs? ( + || ( + sys-fs/aufs3 + sys-kernel/aufs-sources + ) + ) +" + +RESTRICT="strip" + +pkg_setup() { + # many of these were borrowed from the app-emulation/lxc ebuild + CONFIG_CHECK+=" + ~CGROUPS + ~CGROUP_CPUACCT + ~CGROUP_DEVICE + ~CGROUP_SCHED + ~CPUSETS + ~MEMCG_SWAP + ~RESOURCE_COUNTERS + + ~IPC_NS + ~NAMESPACES + ~PID_NS + + ~DEVPTS_MULTIPLE_INSTANCES + ~MACVLAN + ~NET_NS + ~UTS_NS + ~VETH + + ~!NETPRIO_CGROUP + ~POSIX_MQUEUE + + ~BRIDGE + ~IP_NF_TARGET_MASQUERADE + ~NETFILTER_XT_MATCH_ADDRTYPE + ~NETFILTER_XT_MATCH_CONNTRACK + ~NF_NAT + ~NF_NAT_NEEDED + + ~!GRKERNSEC_CHROOT_CAPS + ~!GRKERNSEC_CHROOT_CHMOD + ~!GRKERNSEC_CHROOT_DOUBLE + ~!GRKERNSEC_CHROOT_MOUNT + ~!GRKERNSEC_CHROOT_PIVOT + " + + ERROR_MEMCG_SWAP="CONFIG_MEMCG_SWAP: is required if you wish to limit swap usage of containers" + + for c in GRKERNSEC_CHROOT_MOUNT GRKERNSEC_CHROOT_DOUBLE GRKERNSEC_CHROOT_PIVOT GRKERNSEC_CHROOT_CHMOD; do + declare "ERROR_$c"="CONFIG_$c: see app-emulation/lxc postinst notes for why some GRSEC features make containers unusuable" + done + + if use aufs; then + CONFIG_CHECK+=" + ~AUFS_FS + " + ERROR_AUFS_FS="CONFIG_AUFS_FS: is required to be set if and only if aufs-sources are used" + fi + + if use btrfs; then + CONFIG_CHECK+=" + ~BTRFS_FS + " + fi + + if use device-mapper; then + CONFIG_CHECK+=" + ~BLK_DEV_DM + ~DM_THIN_PROVISIONING + ~EXT4_FS + " + fi + + check_extra_config +} + +src_compile() { + # if we treat them right, Docker's build scripts will set up a + # reasonable GOAPTH for us + export AUTO_GOPATH=1 + + # setup CFLAGS and LDFLAGS for separate build target + # see https://github.com/tianon/docker-overlay/pull/10 + export CGO_CFLAGS="-I${ROOT}/usr/include" + export CGO_LDFLAGS="-L${ROOT}/usr/lib" + + # if we're building from a zip, we need the GITCOMMIT value + [ "$DOCKER_GITCOMMIT" ] && export DOCKER_GITCOMMIT + + # time to build! + ./hack/make.sh dynbinary || die + + if use doc; then + emake -C docs docs man || die + fi +} + +src_install() { + VERSION=$(cat VERSION) + newbin bundles/$VERSION/dynbinary/docker-$VERSION docker + exeinto /usr/libexec/docker + newexe bundles/$VERSION/dynbinary/dockerinit-$VERSION dockerinit + + newinitd contrib/init/openrc/docker.initd docker + newconfd contrib/init/openrc/docker.confd docker + + if use symlink-usr; then + systemd_dounit "${FILESDIR}/symlink-usr/docker.service" + else + systemd_dounit "${FILESDIR}/docker.service" + fi + systemd_dounit "${FILESDIR}/docker.socket" + + insinto /usr/lib/systemd/network + doins "${FILESDIR}"/50-docker{,-veth}.network + + udev_dorules contrib/udev/*.rules + + dodoc AUTHORS CONTRIBUTING.md CHANGELOG.md NOTICE README.md + if use doc; then + dohtml -r docs/_build/html/* + doman docs/_build/man/* + fi + + dobashcomp contrib/completion/bash/* + + if use zsh-completion; then + insinto /usr/share/zsh/site-functions + doins contrib/completion/zsh/* + fi + + if use vim-syntax; then + insinto /usr/share/vim/vimfiles + doins -r contrib/syntax/vim/ftdetect + doins -r contrib/syntax/vim/syntax + fi + + insinto /usr/share/${P}/contrib + doins contrib/README + cp -R "${S}/contrib"/* "${D}/usr/share/${P}/contrib/" +} + +pkg_postinst() { + udev_reload + + elog "" + elog "To use docker, the docker daemon must be running as root. To automatically" + elog "start the docker daemon at boot, add docker to the default runlevel:" + elog " rc-update add docker default" + elog "Similarly for systemd:" + elog " systemctl enable docker.service" + elog "" + + # create docker group if the code checking for it in /etc/group exists + enewgroup docker + + elog "To use docker as a non-root user, add yourself to the docker group." + elog "" +} diff --git a/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/symlink-usr/docker.service b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/symlink-usr/docker.service new file mode 100644 index 0000000000..b8aa40b9ec --- /dev/null +++ b/sdk_container/src/third_party/coreos-overlay/app-emulation/docker/files/symlink-usr/docker.service @@ -0,0 +1,13 @@ +[Unit] +Description=Docker Application Container Engine +Documentation=http://docs.docker.io +After=network.target + +[Service] +ExecStartPre=/bin/mount --make-rprivate / +# Run docker but don't have docker automatically restart +# containers. This is a job for systemd and unit files. +ExecStart=/usr/bin/docker -d -s=btrfs -r=false -H fd:// + +[Install] +WantedBy=multi-user.target