teddyking

mntnses = Dir.glob("/proc/*/ns/mnt")

foundmnts = []
foundpids = []

mntnses.each do |mntns|
        actualmntns = `readlink "#{mntns}"`
        pid = mntns.split("/")[2]
        mntnum = actualmntns.gsub(/mnt:\[/, "").gsub(/\]/, "")
        #puts "#{pid} - #{mntnum}"

teddyking

package main

import (
	"fmt"
	"os"
	"path/filepath"
	"strings"
	"syscall"
	"time"

teddyking

#!/bin/bash

set -x -e

WORKSPACE_DIR=~/workspace/4.4-loop-umount-hang-test

# 1. Setup workspace
mkdir -p $WORKSPACE_DIR
mkdir -p $WORKSPACE_DIR/{diff,mnt,layers}

teddyking

#!/bin/bash

set -x -e

ps aux | grep namespaced | grep -v grep | awk '{print $2}' | xargs -n1 kill -9 || true

umount /root/workspace/4.4-loop-umount-hang-test/mnt/container-2 || true
umount /root/workspace/4.4-loop-umount-hang-test/diff/container-2 || true

umount /root/workspace/4.4-loop-umount-hang-test/mnt/container-1 || true

teddyking

cd /usr/local/
wget "https://storage.googleapis.com/golang/go1.8.linux-amd64.tar.gz"
tar -zxf go1.8.linux-amd64.tar.gz
rm go1.8.linux-amd64.tar.gz
cd
mkdir go
cd go
mkdir src pkg bin
cd ../

teddyking

#!/bin/bash

set -e -x

apt-get -y update
apt-get -y install software-properties-common python-pip python3-dev python3-pip
add-apt-repository -y ppa:neovim-ppa/unstable
apt-get -y update
apt-get -y install neovim

teddyking

Action: func(context *cli.Context) error {
	if err := checkArgs(context, 1, exactArgs); err != nil {
		return err
	}
	if err := revisePidFile(context); err != nil {
		return err
	}
	spec, err := setupSpec(context)
	if err != nil {
		return err

teddyking

func startContainer(context *cli.Context, spec *specs.Spec, create bool) (int, error) {
	id := context.Args().First()
	if id == "" {
		return -1, errEmptyID
	}
	container, err := createContainer(context, id, spec)
	if err != nil {
		return -1, err
	}
	// Support on-demand socket activation by passing file descriptors into the container init process.

teddyking

Objective

In this gist, we verified that the iptables regression patches improved performance for both direct iptables executions and for garden NetOut API calls.

In this gist, we attempt to verify that the performance improvements are still seen for the Release Candidate 4.4.0-63.84~14.04.1.

iptables rule addition

teddyking

{
	"ociVersion": "1.0.0-rc3",
	"platform": {
		"os": "linux",
		"arch": "amd64"
	},
	"process": {
		"terminal": false,
		"consoleSize": {
			"height": 0,