{"action":"created","issue":{"url":"https://api.github.com/repos/mato/docker-unikernel-runner/issues/4","repository_url":"https://api.github.com/repos/mato/docker-unikernel-runner","labels_url":"https://api.github.com/repos/mato/docker-unikernel-runner/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/mato/docker-unikernel-runner/issues/4/comments","events_url":"https://api.github.com/repos/mato/docker-unikernel-runner/issues/4/events","html_url":"https://github.com/mato/docker-unikernel-runner/pull/4","id":194628351,"number":4,"title":"Pass tap device to ukvm as an open fd","user":{"login":"ijc25","id":12985729,"avatar_url":"https://avatars.githubusercontent.com/u/12985729?v=3","gravatar_id":"","url":"https://api.github.com/users/ijc25","html_url":"https://github.com/ijc25","followers_url":"https://api.github.com/users/ijc25/followers","following_url":"https://api.github.com/users/ijc25/following{/other_user}","gists_url":"https://api.github.com/users/ijc25/gists{/gist_id}","starred_url":"https://api.github.com/users/ijc25/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ijc25/subscriptions","organizations_url":"https://api.github.com/users/ijc25/orgs","repos_url":"https://api.github.com/users/ijc25/repos","events_url":"https://api.github.com/users/ijc25/events{/privacy}","received_events_url":"https://api.github.com/users/ijc25/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-12-09T15:49:12Z","updated_at":"2016-12-12T10:13:50Z","closed_at":"2016-12-12T10:00:49Z","pull_request":{"url":"https://api.github.com/repos/mato/docker-unikernel-runner/pulls/4","html_url":"https://github.com/mato/docker-unikernel-runner/pull/4","diff_url":"https://github.com/mato/docker-unikernel-runner/pull/4.diff","patch_url":"https://github.com/mato/docker-unikernel-runner/pull/4.patch"},"body":"This requires a corresponding change to ukvm itself which can be found in https://github.com/Solo5/solo5/pull/143.\r\n\r\nThis pulls the tun interaction one level further up the stack. Currently this makes little practical difference (the container still needs access to `/dev/net/tun` and `CAP_NET_ADMIN`) but it pushes the privileged operation one step closer to the privilege boundary, which is a start."},"comment":{"url":"https://api.github.com/repos/mato/docker-unikernel-runner/issues/comments/266390322","html_url":"https://github.com/mato/docker-unikernel-runner/pull/4#issuecomment-266390322","issue_url":"https://api.github.com/repos/mato/docker-unikernel-runner/issues/4","id":266390322,"user":{"login":"mato","id":190797,"avatar_url":"https://avatars.githubusercontent.com/u/190797?v=3","gravatar_id":"","url":"https://api.github.com/users/mato","html_url":"https://github.com/mato","followers_url":"https://api.github.com/users/mato/followers","following_url":"https://api.github.com/users/mato/following{/other_user}","gists_url":"https://api.github.com/users/mato/gists{/gist_id}","starred_url":"https://api.github.com/users/mato/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mato/subscriptions","organizations_url":"https://api.github.com/users/mato/orgs","repos_url":"https://api.github.com/users/mato/repos","events_url":"https://api.github.com/users/mato/events{/privacy}","received_events_url":"https://api.github.com/users/mato/received_events","type":"User","site_admin":false},"created_at":"2016-12-12T10:13:50Z","updated_at":"2016-12-12T10:13:50Z","body":"Build failure is expected, the output products of `mirage build` have changed upstream. Will sync up shortly."}}
{"actor":{"display_login":"mato"}}