{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/15187","repository_url":"https://api.github.com/repos/docker/docker","labels_url":"https://api.github.com/repos/docker/docker/issues/15187/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/15187/comments","events_url":"https://api.github.com/repos/docker/docker/issues/15187/events","html_url":"https://github.com/docker/docker/issues/15187","id":98295848,"number":15187,"title":"User namespaces - Phase 1","user":{"login":"icecrime","id":1564054,"avatar_url":"https://avatars.githubusercontent.com/u/1564054?v=3","gravatar_id":"","url":"https://api.github.com/users/icecrime","html_url":"https://github.com/icecrime","followers_url":"https://api.github.com/users/icecrime/followers","following_url":"https://api.github.com/users/icecrime/following{/other_user}","gists_url":"https://api.github.com/users/icecrime/gists{/gist_id}","starred_url":"https://api.github.com/users/icecrime/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/icecrime/subscriptions","organizations_url":"https://api.github.com/users/icecrime/orgs","repos_url":"https://api.github.com/users/icecrime/repos","events_url":"https://api.github.com/users/icecrime/events{/privacy}","received_events_url":"https://api.github.com/users/icecrime/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/group/security","name":"group/security","color":"F6FBFF"},{"url":"https://api.github.com/repos/docker/docker/labels/roadmap","name":"roadmap","color":"eb6420"}],"state":"closed","locked":false,"assignee":{"login":"estesp","id":1397980,"avatar_url":"https://avatars.githubusercontent.com/u/1397980?v=3","gravatar_id":"","url":"https://api.github.com/users/estesp","html_url":"https://github.com/estesp","followers_url":"https://api.github.com/users/estesp/followers","following_url":"https://api.github.com/users/estesp/following{/other_user}","gists_url":"https://api.github.com/users/estesp/gists{/gist_id}","starred_url":"https://api.github.com/users/estesp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/estesp/subscriptions","organizations_url":"https://api.github.com/users/estesp/orgs","repos_url":"https://api.github.com/users/estesp/repos","events_url":"https://api.github.com/users/estesp/events{/privacy}","received_events_url":"https://api.github.com/users/estesp/received_events","type":"User","site_admin":false},"assignees":[{"login":"estesp","id":1397980,"avatar_url":"https://avatars.githubusercontent.com/u/1397980?v=3","gravatar_id":"","url":"https://api.github.com/users/estesp","html_url":"https://github.com/estesp","followers_url":"https://api.github.com/users/estesp/followers","following_url":"https://api.github.com/users/estesp/following{/other_user}","gists_url":"https://api.github.com/users/estesp/gists{/gist_id}","starred_url":"https://api.github.com/users/estesp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/estesp/subscriptions","organizations_url":"https://api.github.com/users/estesp/orgs","repos_url":"https://api.github.com/users/estesp/repos","events_url":"https://api.github.com/users/estesp/events{/privacy}","received_events_url":"https://api.github.com/users/estesp/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/docker/docker/milestones/41","html_url":"https://github.com/docker/docker/milestones/1.9.0","labels_url":"https://api.github.com/repos/docker/docker/milestones/41/labels","id":1211905,"number":41,"title":"1.9.0","description":"","creator":{"login":"dmp42","id":332946,"avatar_url":"https://avatars.githubusercontent.com/u/332946?v=3","gravatar_id":"","url":"https://api.github.com/users/dmp42","html_url":"https://github.com/dmp42","followers_url":"https://api.github.com/users/dmp42/followers","following_url":"https://api.github.com/users/dmp42/following{/other_user}","gists_url":"https://api.github.com/users/dmp42/gists{/gist_id}","starred_url":"https://api.github.com/users/dmp42/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dmp42/subscriptions","organizations_url":"https://api.github.com/users/dmp42/orgs","repos_url":"https://api.github.com/users/dmp42/repos","events_url":"https://api.github.com/users/dmp42/events{/privacy}","received_events_url":"https://api.github.com/users/dmp42/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":239,"state":"closed","created_at":"2015-07-16T20:50:09Z","updated_at":"2016-07-14T12:19:48Z","due_on":"2015-11-03T05:00:00Z","closed_at":"2015-11-03T20:09:05Z"},"comments":38,"created_at":"2015-07-31T01:10:55Z","updated_at":"2016-08-02T22:10:53Z","closed_at":"2015-10-10T18:38:50Z","body":"# Description\r\n\r\nUser namespaces are a long awaited feature, on which Phil Estes (@estesp) did some amazing work (see #12648). Unfortunately, the integration unexpectedly conflicted with the recent introduction of [`libnetwork`](https://github.com/docker/libnetwork).\r\n\r\nWe want to fix this for 1.9.0 and be able to merge Phil's work, which means:\r\n- All containers have their own user namespace (effectively preventing the use of `--net=host` or `--net=container:<id>`).\r\n- A daemon-wide setting remaps the root user for all containers.\r\n\r\n# How to\r\n\r\nWe need the following:\r\n- [X] Patch to libcontainer to enable a hook after namespaces creation (https://github.com/opencontainers/runc/pull/160) - *while the hooks in runc/160 are for runC configs specifically, a separate PR (opencontainers/runc#261) brought the same function into libcontainer directly and is merged and already vendored into Docker with the 0.0.4 vendor merge*\r\n- [x] Patch to libnetwork to enable a single entrypoint to be called in that hook (https://github.com/docker/libnetwork/issues/429) - *PR #16282 was merged 9/14*\r\n- [x] Patch to connect the libcontainer pre-start hook to the new libnetwork sandbox \"setExternalKey\" function - *PR #16305 merged 9/16*\r\n- [x] Re-submitting the user namespace integration PR (@estesp) https://github.com/docker/docker/pull/12648 - *branch currently has UI as experimental; can be moved into master when necessary*"},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/237061712","html_url":"https://github.com/docker/docker/issues/15187#issuecomment-237061712","issue_url":"https://api.github.com/repos/docker/docker/issues/15187","id":237061712,"user":{"login":"innocentme1","id":19864555,"avatar_url":"https://avatars.githubusercontent.com/u/19864555?v=3","gravatar_id":"","url":"https://api.github.com/users/innocentme1","html_url":"https://github.com/innocentme1","followers_url":"https://api.github.com/users/innocentme1/followers","following_url":"https://api.github.com/users/innocentme1/following{/other_user}","gists_url":"https://api.github.com/users/innocentme1/gists{/gist_id}","starred_url":"https://api.github.com/users/innocentme1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/innocentme1/subscriptions","organizations_url":"https://api.github.com/users/innocentme1/orgs","repos_url":"https://api.github.com/users/innocentme1/repos","events_url":"https://api.github.com/users/innocentme1/events{/privacy}","received_events_url":"https://api.github.com/users/innocentme1/received_events","type":"User","site_admin":false},"created_at":"2016-08-02T22:10:53Z","updated_at":"2016-08-02T22:10:53Z","body":"yup...thank you :) "}}
{"actor":{"display_login":"innocentme1"}}