{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/9620","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/9620/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/9620/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/9620/events","html_url":"https://github.com/openshift/origin/pull/9620","id":162802198,"number":9620,"title":"Prevent dind containers from being targeted by oci-systemd-hooks","user":{"login":"marun","id":451477,"avatar_url":"https://avatars.githubusercontent.com/u/451477?v=3","gravatar_id":"","url":"https://api.github.com/users/marun","html_url":"https://github.com/marun","followers_url":"https://api.github.com/users/marun/followers","following_url":"https://api.github.com/users/marun/following{/other_user}","gists_url":"https://api.github.com/users/marun/gists{/gist_id}","starred_url":"https://api.github.com/users/marun/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marun/subscriptions","organizations_url":"https://api.github.com/users/marun/orgs","repos_url":"https://api.github.com/users/marun/repos","events_url":"https://api.github.com/users/marun/events{/privacy}","received_events_url":"https://api.github.com/users/marun/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2016-06-28T22:28:52Z","updated_at":"2016-06-29T15:01:08Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/9620","html_url":"https://github.com/openshift/origin/pull/9620","diff_url":"https://github.com/openshift/origin/pull/9620.diff","patch_url":"https://github.com/openshift/origin/pull/9620.patch"},"body":"oci-systemd-hooks detects that a container will run systemd by checking\r\nfor an entrypoint command of 'systemd' or 'init' and then mounts most\r\ncgroups read-only to support running systemd in an unprivileged\r\ncontainer.  This is not compatible with dind containers, which require\r\nrunning with --privileged to ensure cgroups mounted read-write.  This\r\nchange hardlinks 'init' to 'dind_init' and uses that as the entrypoint\r\nto avoid having dind containers be targeted by the hook.\r\n\r\nI'm including a couple of minor dind fixes with this that came up on the way to the fix.\r\n\r\nShould supercede #9613 and fixes #9599.\r\n\r\ncc: @openshift/networking @ncdc "},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/229384177","html_url":"https://github.com/openshift/origin/pull/9620#issuecomment-229384177","issue_url":"https://api.github.com/repos/openshift/origin/issues/9620","id":229384177,"user":{"login":"openshift-bot","id":1779249,"avatar_url":"https://avatars.githubusercontent.com/u/1779249?v=3","gravatar_id":"","url":"https://api.github.com/users/openshift-bot","html_url":"https://github.com/openshift-bot","followers_url":"https://api.github.com/users/openshift-bot/followers","following_url":"https://api.github.com/users/openshift-bot/following{/other_user}","gists_url":"https://api.github.com/users/openshift-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/openshift-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/openshift-bot/subscriptions","organizations_url":"https://api.github.com/users/openshift-bot/orgs","repos_url":"https://api.github.com/users/openshift-bot/repos","events_url":"https://api.github.com/users/openshift-bot/events{/privacy}","received_events_url":"https://api.github.com/users/openshift-bot/received_events","type":"User","site_admin":false},"created_at":"2016-06-29T15:01:08Z","updated_at":"2016-06-29T15:01:08Z","body":"continuous-integration/openshift-jenkins/merge Evaluating for testing"}}
{"actor":{"display_login":"openshift-bot"}}