{"action":"created","issue":{"url":"https://api.github.com/repos/moby/moby/issues/38377","repository_url":"https://api.github.com/repos/moby/moby","labels_url":"https://api.github.com/repos/moby/moby/issues/38377/labels{/name}","comments_url":"https://api.github.com/repos/moby/moby/issues/38377/comments","events_url":"https://api.github.com/repos/moby/moby/issues/38377/events","html_url":"https://github.com/moby/moby/pull/38377","id":391310539,"node_id":"MDExOlB1bGxSZXF1ZXN0MjM4ODY3NDM2","number":38377,"title":"Start containers in their own cgroup namespaces","user":{"login":"rgulewich","id":391762,"node_id":"MDQ6VXNlcjM5MTc2Mg==","avatar_url":"https://avatars2.githubusercontent.com/u/391762?v=4","gravatar_id":"","url":"https://api.github.com/users/rgulewich","html_url":"https://github.com/rgulewich","followers_url":"https://api.github.com/users/rgulewich/followers","following_url":"https://api.github.com/users/rgulewich/following{/other_user}","gists_url":"https://api.github.com/users/rgulewich/gists{/gist_id}","starred_url":"https://api.github.com/users/rgulewich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rgulewich/subscriptions","organizations_url":"https://api.github.com/users/rgulewich/orgs","repos_url":"https://api.github.com/users/rgulewich/repos","events_url":"https://api.github.com/users/rgulewich/events{/privacy}","received_events_url":"https://api.github.com/users/rgulewich/received_events","type":"User","site_admin":false},"labels":[{"id":175375318,"node_id":"MDU6TGFiZWwxNzUzNzUzMTg=","url":"https://api.github.com/repos/moby/moby/labels/status/1-design-review","name":"status/1-design-review","color":"fef2c0","default":false}],"state":"open","locked":false,"assignee":{"login":"aaronlehmann","id":10601430,"node_id":"MDQ6VXNlcjEwNjAxNDMw","avatar_url":"https://avatars3.githubusercontent.com/u/10601430?v=4","gravatar_id":"","url":"https://api.github.com/users/aaronlehmann","html_url":"https://github.com/aaronlehmann","followers_url":"https://api.github.com/users/aaronlehmann/followers","following_url":"https://api.github.com/users/aaronlehmann/following{/other_user}","gists_url":"https://api.github.com/users/aaronlehmann/gists{/gist_id}","starred_url":"https://api.github.com/users/aaronlehmann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aaronlehmann/subscriptions","organizations_url":"https://api.github.com/users/aaronlehmann/orgs","repos_url":"https://api.github.com/users/aaronlehmann/repos","events_url":"https://api.github.com/users/aaronlehmann/events{/privacy}","received_events_url":"https://api.github.com/users/aaronlehmann/received_events","type":"User","site_admin":false},"assignees":[{"login":"aaronlehmann","id":10601430,"node_id":"MDQ6VXNlcjEwNjAxNDMw","avatar_url":"https://avatars3.githubusercontent.com/u/10601430?v=4","gravatar_id":"","url":"https://api.github.com/users/aaronlehmann","html_url":"https://github.com/aaronlehmann","followers_url":"https://api.github.com/users/aaronlehmann/followers","following_url":"https://api.github.com/users/aaronlehmann/following{/other_user}","gists_url":"https://api.github.com/users/aaronlehmann/gists{/gist_id}","starred_url":"https://api.github.com/users/aaronlehmann/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aaronlehmann/subscriptions","organizations_url":"https://api.github.com/users/aaronlehmann/orgs","repos_url":"https://api.github.com/users/aaronlehmann/repos","events_url":"https://api.github.com/users/aaronlehmann/events{/privacy}","received_events_url":"https://api.github.com/users/aaronlehmann/received_events","type":"User","site_admin":false}],"milestone":null,"comments":19,"created_at":"2018-12-14T23:15:38Z","updated_at":"2019-03-26T23:35:31Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/moby/moby/pulls/38377","html_url":"https://github.com/moby/moby/pull/38377","diff_url":"https://github.com/moby/moby/pull/38377.diff","patch_url":"https://github.com/moby/moby/pull/38377.patch"},"body":"**- What I did**\r\n\r\nThis adds [cgroup namespace support](http://man7.org/linux/man-pages/man7/cgroup_namespaces.7.html) to docker. It's enabled for all containers that are not run with `--privileged`, if the kernel supports it.\r\n\r\nFixes #38332.\r\n\r\n**- How I did it**\r\n\r\nNow that [runc supports cgroup namespaces](https://github.com/opencontainers/runc/pull/1916), just add a namespace of type \"cgroup\" to the list.\r\n\r\nAt daemon startup, this looks for `/proc/self/ns/cgroup` to be present to determine whether or not to enable it.\r\n\r\n**- How to verify it**\r\n\r\nRun a new container and verify that its pid 1 is running in its own cgroup namespace.\r\n\r\n**- Description for the changelog**\r\n\r\nAdd cgroup namespace support for Linux containers\r\n\r\n**- A picture of a cute animal (not mandatory but encouraged)**"},"comment":{"url":"https://api.github.com/repos/moby/moby/issues/comments/476895627","html_url":"https://github.com/moby/moby/pull/38377#issuecomment-476895627","issue_url":"https://api.github.com/repos/moby/moby/issues/38377","id":476895627,"node_id":"MDEyOklzc3VlQ29tbWVudDQ3Njg5NTYyNw==","user":{"login":"justincormack","id":482364,"node_id":"MDQ6VXNlcjQ4MjM2NA==","avatar_url":"https://avatars0.githubusercontent.com/u/482364?v=4","gravatar_id":"","url":"https://api.github.com/users/justincormack","html_url":"https://github.com/justincormack","followers_url":"https://api.github.com/users/justincormack/followers","following_url":"https://api.github.com/users/justincormack/following{/other_user}","gists_url":"https://api.github.com/users/justincormack/gists{/gist_id}","starred_url":"https://api.github.com/users/justincormack/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/justincormack/subscriptions","organizations_url":"https://api.github.com/users/justincormack/orgs","repos_url":"https://api.github.com/users/justincormack/repos","events_url":"https://api.github.com/users/justincormack/events{/privacy}","received_events_url":"https://api.github.com/users/justincormack/received_events","type":"User","site_admin":false},"created_at":"2019-03-26T23:35:31Z","updated_at":"2019-03-26T23:35:31Z","author_association":"CONTRIBUTOR","body":"Needs a rebase."}}
{"actor":{"display_login":"justincormack"}}