Re: [atomic-devel] docker binary

2015-07-22 Thread Jeremy Eder
On Tue, Jul 21, 2015 at 8:32 PM, Waldemar Augustyn wrote: > No super privilege, rather, we want > to control all those containers running on it. Storage is another one. > ​Hi, what did you mean by 'storage is another one'? You want to be able to admin the host's storage from inside a container

Re: [atomic-devel] docker binary

2015-07-21 Thread Waldemar Augustyn
On 07/21/2015 07:47 AM, Daniel J Walsh wrote: > > On 07/21/2015 09:28 AM, Trevor Jay wrote: >> On Tue, Jul 21, 2015 at 08:22:50AM -0400, Daniel J Walsh wrote: >>> Yes we actually recommend using something like >>> >>> docker run -ti -v /:/host -v /run:/run -v /dev:/dev --privileged fedora >>> /bin/

Re: [atomic-devel] docker binary

2015-07-21 Thread Daniel J Walsh
On 07/21/2015 09:28 AM, Trevor Jay wrote: > On Tue, Jul 21, 2015 at 08:22:50AM -0400, Daniel J Walsh wrote: >> Yes we actually recommend using something like >> >> docker run -ti -v /:/host -v /run:/run -v /dev:/dev --privileged fedora >> /bin/sh >> >> And then you can add stuff like >> --net=hos

Re: [atomic-devel] docker binary

2015-07-21 Thread Trevor Jay
On Tue, Jul 21, 2015 at 08:22:50AM -0400, Daniel J Walsh wrote: > Yes we actually recommend using something like > > docker run -ti -v /:/host -v /run:/run -v /dev:/dev --privileged fedora > /bin/sh > > And then you can add stuff like > --net=host --pid=host --ipc=host > > And you slowly end up

Re: [atomic-devel] docker binary

2015-07-21 Thread Daniel J Walsh
On 07/21/2015 12:56 AM, Waldemar Augustyn wrote: > On 07/20/2015 06:16 PM, Trevor Jay wrote: >> On Sun, Jul 19, 2015 at 09:31:26PM -0700, Waldemar Augustyn wrote: >>> [...] >>> Host services such as docker, systemctl, and a few others find their way >>> to containers via bind mounts. >>> [...]

Re: [atomic-devel] docker binary

2015-07-21 Thread Daniel J Walsh
On 07/20/2015 09:16 PM, Trevor Jay wrote: > On Sun, Jul 19, 2015 at 09:31:26PM -0700, Waldemar Augustyn wrote: >> [...] >> Host services such as docker, systemctl, and a few others find their way >> to containers via bind mounts. >> [...] >> > They should be finding their way in as *endpoints*

Re: [atomic-devel] docker binary

2015-07-21 Thread Daniel J Walsh
On 07/20/2015 08:56 PM, Waldemar Augustyn wrote: > > On 07/20/2015 11:41 AM, Daniel J Walsh wrote: >> On 07/20/2015 12:31 AM, Waldemar Augustyn wrote: >>> I've been wondering about it. Docker's docker is a single binary. >>> RedHat's docker is a binary plus some dozen shared libraries. >> Not

Re: [atomic-devel] docker binary

2015-07-20 Thread Waldemar Augustyn
On 07/20/2015 06:16 PM, Trevor Jay wrote: > On Sun, Jul 19, 2015 at 09:31:26PM -0700, Waldemar Augustyn wrote: >> [...] >> Host services such as docker, systemctl, and a few others find their way >> to containers via bind mounts. >> [...] >> > They should be finding their way in as *endpoints* th

Re: [atomic-devel] docker binary

2015-07-20 Thread Trevor Jay
On Sun, Jul 19, 2015 at 09:31:26PM -0700, Waldemar Augustyn wrote: > [...] > Host services such as docker, systemctl, and a few others find their way > to containers via bind mounts. > [...] > They should be finding their way in as *endpoints* that native (to the container) clients talk to and

Re: [atomic-devel] docker binary

2015-07-20 Thread Waldemar Augustyn
On 07/20/2015 11:41 AM, Daniel J Walsh wrote: > > On 07/20/2015 12:31 AM, Waldemar Augustyn wrote: >> I've been wondering about it. Docker's docker is a single binary. >> RedHat's docker is a binary plus some dozen shared libraries. > Not sure I follow, we ship a single binary. It is not sta

Re: [atomic-devel] docker binary

2015-07-20 Thread Daniel J Walsh
On 07/20/2015 12:31 AM, Waldemar Augustyn wrote: > I've been wondering about it. Docker's docker is a single binary. > RedHat's docker is a binary plus some dozen shared libraries. Not sure I follow, we ship a single binary. It is not statically linked, it uses shared libraries from the Host