-
Notifications
You must be signed in to change notification settings - Fork 0
Engine 1.9.0
- Freeze: 2015-09-xx
- Release: 2015-10-xx
User namespaces are a long awaited feature, on which Phil Estes (@estesp) did some amazing work (see #12648). Unfortunately, the integration unexpectedly conflicted with the recent introduction of libnetwork
.
We want to fix this for 1.9.0 and be able to merge Phil's work, which means:
- All containers have their own user namespace (effectively preventing the use of
--net=host
or--net=container:<id>
). - A daemon-wide setting remaps the root user for all containers.
As explained in the roadmap document, we want to enable client-side build.
The Engine currently has several compiled-in execdriver
implementations, the default one being libcontainer
. We the apparition of the Open Containers Initiative, we want the Engine to have a single execution backend capable of shelling-out to an OCI compliant binary. Currently, the standard and default implementation of such binary is runC.
It's unlikely that this will ship as the sole, default execution backend for Docker 1.9.0, but we intend to show some progress in a separate branch.