├── .remarkrc ├── CHANGELOG.md ├── OSS_DISCLOSURES.md ├── README.md ├── docs ├── README.md ├── distro-compat.md ├── figures │ ├── dind.png │ ├── k8s-in-docker.png │ ├── kind-sysbox.png │ ├── kindbox.png │ ├── sysbox-ee-header.png │ ├── sysbox-features.png │ └── sysbox.png └── issue-guidelines.md └── scr ├── LICENSE.txt └── rm_all_syscont /.remarkrc: -------------------------------------------------------------------------------- 1 | { 2 | "plugins": { 3 | "remark-toc": { 4 | "tight": true, 5 | "heading": "contents", 6 | "maxDepth": 2 7 | }, 8 | "remark-validate-links": { 9 | }, 10 | "remark-lint": { 11 | "no-multiple-toplevel-headings": false, 12 | "maximum-line-length": 90, 13 | "table-pipe-alignment": true, 14 | "table-cell-padding": false 15 | } 16 | } 17 | } -------------------------------------------------------------------------------- /CHANGELOG.md: -------------------------------------------------------------------------------- 1 | # Changelog 2 | All notable changes to this project will be documented in this file. 3 | 4 | ## [0.5.2] - 2022-05-18 5 | ### Added 6 | * Fixed issue #544 preventing containers initialization within sysbox containers when running latest oci-runc releases (1.1.0-rc.1+). 7 | 8 | ## [0.5.1] - 2022-04-06 9 | ### Added 10 | * Added support to allow CIFS mounts within Sysbox containers (Sysbox-EE only). 11 | * Fixed issue to allow shiftfs mounts over files that are themselves bind-mounts. 12 | 13 | ## [0.5.0] - 2022-03-23 14 | ### Added 15 | * Added support for Linux ID-mapped mounts (shiftfs alternative in kernels >= 5.12). 16 | * Added support for ARM64 hosts. 17 | * Added support for running buildx/buildkit inside Sysbox containers. 18 | * Added support for running Rancher RKE2 and Mirantis K0s inside Sysbox containers. 19 | * Added configs to disable trapping chown and xattr* syscalls (improves performance but may reduce functionality). 20 | * Added config to strictly honor container capabilities from higher-level container manager. 21 | * Added support for per-container configs via `SYSBOX_*` env vars. 22 | * Improved performance of Sysbox's syscall interception code. 23 | * Improved the way Sysbox releases the seccomp-fd handles for intercept syscalls (kernels >= 5.8). 24 | * Improved Sysbox's cross-compilation support (artifacts can now be generated from/to either AMD64 or ARM64 hosts). 25 | * Update to golang 1.16. 26 | * Replaced the per-distro *.deb installation packages with a single deb bundle package. 27 | * Allow alternative Docker data-root inside a Sysbox container (if Docker is pre-installed in the Sysbox container image). 28 | * Fixed segfault when building Docker image inside Sysbox container (issue #484). 29 | * Fixed segfault when running python pip install inside nested sysbox container (issue #485). 30 | * Fixed issue with running KinD inside a Sysbox container (issue #415). 31 | * Fixed problem with shiftfs mounts on Kubernetes persistent volumes (issue #431). 32 | ### Removed 33 | * None. 34 | 35 | ## [0.4.1] - 2021-09-30 36 | ### Added 37 | * Added important optimization to expedite the container creation cycle. 38 | * Enhanced uid-shifting logic to perform shifting operations of Sysbox's special dirs on a need basis. 39 | * Added support for Kinvolk's Flatcar Linux distribution (Sysbox-EE only). 40 | * Added basic building-blocks to allow Sysbox support on ARM platforms. 41 | * Fixed issue preventing Sysbox folders from being eliminated from HDD when Sysbox is shutdown. 42 | * Enable sys container processes to set 'trusted.overlay.opaque' xattr on files (issue #254). 43 | * Fixed bug resulting in the failure of "mount" operation within a sys container. 44 | * Made various enhancements to Sysbox's kubernetes installer to simplify its operation. 45 | * Extend Sysbox's kubernetes installer to support Rancher's RKE k8s distribution. 46 | 47 | ## [0.4.0] - 2021-07-19 48 | ### Added 49 | * Added support to create secure Kubernetes PODs with Sysbox (sysbox-pods). 50 | * Added support for Cgroups-v2 systems. 51 | * Added support for WeaveNet and Calico CNIs to run within a Sysbox container. 52 | * Added support to allow K3s execution within Sysbox containers. 53 | * Extended Sysbox support to Fedora-33 and Fedora-34 releases. 54 | * Extended Sysbox support to Flatcar Linux distribution. 55 | * Modified Sysbox binaries' installation path ("/usr/local/sbin" -> "/usr/bin"). 56 | * Enhanced generation and handling of logging output by relying on systemd (journald) subsystem. 57 | * Multiple enhancements in /proc & /sys file-system's emulation logic. 58 | * Extended installer to allow it to deploy Sysbox in non-strictly-supported distros / releases. 59 | * Improved security of shiftfs mounts. 60 | * Fixed issue impacting sysbox-fs stability in scaling scenarios (issue #266). 61 | * Fixed issue preventing sys-container initialization due a recent change in oci-runc (issue #291). 62 | * Fixed issue with "--mountpoint" cli knob being ignored (sysbox issue #310). 63 | * Fixed issue causing sysbox-fs handlers to stall upon access to a procfs node (issue #306). 64 | * Fixed issue preventing write access to 'domainname' procfs node (issue #287). 65 | * Fixed issue preventing systemd-based containers from being able to initialize (issue #273). 66 | * Made changes to allow Docker network sharing between containers. 67 | * Ensure that Sysbox mounts in read-only containers are mounted as read only. 68 | ### Removed 69 | * Deprecated EOL'd Fedora-31 and Fedora-32 releases. 70 | 71 | ## [0.3.0] - 2021-03-26 72 | ### Added 73 | * Secured system container initial mounts (mount/remount/unmounts on these from within the container are now restricted). See [here](docs/user-guide/security.md#initial-mount-immutability) for details. 74 | * Improved Sysbox systemd service unit files (dependencies, open-file limits). 75 | * Improved logging by sysbox-mgr and sysbox-fs (json logging, more succint logs). 76 | * Added support for systemd-managed cgroups v1 on the host (cgroups v2 still not supported). 77 | * Added support for read-only Docker containers. 78 | * Synced-up sysbox-runc to include the latest changes from the OCI runc. 79 | * Added support for Debian distribution (Buster and Bullseye). 80 | * Added ground-work to support Sysbox on RedHat, Fedora, and CentOS (next step is creating a package manager for these). 81 | * Added config option to configure the Sysbox work directory (defaults to /var/lib/sysbox). 82 | * Fixed sporadic session stalling issue during syscall interception handling. 83 | * Fixed sysbox-mgr file descriptor leak (sysbox issue #195). 84 | * Fixed problem with "docker --restart" on Sysbox containers (sysbox issue #184). 85 | * Fixed race condition in sysbox-fs procfs & sysfs emulation. 86 | * Fixed problem preventing kernel-headers from being properly imported within sys containers. 87 | * Fixed inappropriate handling of mount instructions in chroot jail environments. 88 | ### Removed 89 | * None. 90 | 91 | ## [0.2.0] - 2020-07-03 92 | ### Added 93 | * Added initial Kubernetes-in-Docker support to enable secure, flexible and portable K8s clusters. 94 | * Implemented inner Docker Image Sharing feature, to dramatically reduce host storage utilization for system containers that come preloaded with Docker images. 95 | * Added support for running privileged-containers within secure system containers. 96 | * Added support for containerd to run within system containers. 97 | * Made multiple performance improvements to expedite container initialization and i/o operations. 98 | * Added support for Ubuntu-Eoan (19.10) and Ubuntu-Focal (20.04). 99 | * Extended support for Ubuntu-Cloud releases (Bionic, Eoan, Focal). 100 | * Enhanced Sysbox documentation. 101 | ### Removed 102 | * Deprecated support of Ubuntu's EOL releases: Ubuntu-Disco (19.04) and Ubuntu-Cosmic (18.10). 103 | 104 | ## [0.1.2] - 2019-11-11 105 | ### Added 106 | * Created Sysbox Quick Start Guide document (with several examples on how to use system containers). 107 | * Added support for running Systemd in a system container. 108 | * Added support for the Ubuntu shiftfs filesytem (replaces the Nestybox shiftfs). 109 | * Using `docker build` to create a system container image that includes inner container images. 110 | * Using `docker commit` to create a system container image that includes inner container images. 111 | * Added support for mounts over a system container's `/var/lib/docker` (for persistency of inner container images). 112 | * Made multiple improvements to the Sysbox User's Guide and Design Guide docs. 113 | * Rebranded 'sysboxd' to 'sysbox'. 114 | ### Removed 115 | * Deprecated Nestybox shiftfs module. 116 | 117 | ## [0.1.1] - 2019-09-04 118 | ### Added 119 | * Extend installer support to latest Ubuntu kernel (5.0.0-27). 120 | 121 | ## [0.1.0] - 2019-08-28 122 | ### Added 123 | * Initial public release. 124 | * Added external documentation: README, user-guide, design-guide, etc. 125 | * Extend support to Ubuntu-Bionic (+5.x kernel) with userns-remap disabled. 126 | * Added consistent versioning to all sysboxd components. 127 | * Increased list of kernels supported by nbox-shiftfs module (refer to nbox-shiftfs module documentation). 128 | * Add changelog info to the debian package installer. 129 | 130 | ## [0.0.1] - 2019-07-23 131 | ### Added 132 | * Internal release (non-public). 133 | * Supports launching system containers with Docker. 134 | * Supports running Docker inside a system container. 135 | * Supports exclusive uid(gid) mappings per system container. 136 | * Supports partially virtualized procfs. 137 | * Supports docker with or without userns-remap. 138 | * Supports Ubuntu Disco (with userns-remap disabled). 139 | * Supports Ubuntu Disco, Cosmic, and Bionic (with userns-remap enabled). 140 | * Includes the Nestybox shiftfs kernel module for uid(gid) shifting. 141 | -------------------------------------------------------------------------------- /OSS_DISCLOSURES.md: -------------------------------------------------------------------------------- 1 | # Sysbox-EE Open Source Disclosures 2 | 3 | ## LGPL v2.1 Licenses 4 | 5 | The GNU Lesser General Public License (LGPL v2.1) is applicable to the following 6 | component(s): 7 | 8 | * libc.so.6 9 | * libpthread.so.0 10 | * nestybox/libseccomp 11 | 12 | To meet the conditions for section 6 of this license, Sysbox-EE customers may 13 | request a copy of the object code for Sysbox-EE by contacting Nestybox at 14 | contact@nestybox.com. 15 | 16 | ``` 17 | GNU Lesser General Public License 18 | Version 2.1, February 1999 19 | Copyright © 1991, 1999 Free Software Foundation, Inc. 20 | 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA 21 | 22 | Everyone is permitted to copy and distribute verbatim copies of this license 23 | document, but changing it is not allowed. 24 | 25 | This is the first released version of the Lesser GPL. It also counts as the 26 | successor of the GNU Library Public License, version 2, hence the version number 27 | 2.1. 28 | 29 | Preamble 30 | 31 | The licenses for most software are designed to take away your freedom 32 | to share and change it. By contrast, the GNU General Public Licenses are 33 | intended to guarantee your freedom to share and change free software--to make 34 | sure the software is free for all its users. 35 | 36 | This license, the Lesser General Public License, applies to some specially 37 | designated software packages--typically libraries--of the Free Software 38 | Foundation and other authors who decide to use it. You can use it too, but we 39 | suggest you first think carefully about whether this license or the ordinary 40 | General Public License is the better strategy to use in any particular case, 41 | based on the explanations below. 42 | 43 | When we speak of free software, we are referring to freedom of use, not 44 | price. Our General Public Licenses are designed to make sure that you have the 45 | freedom to distribute copies of free software (and charge for this service if 46 | you wish); that you receive source code or can get it if you want it; that you 47 | can change the software and use pieces of it in new free programs; and that you 48 | are informed that you can do these things. 49 | 50 | To protect your rights, we need to make restrictions that forbid distributors to 51 | deny you these rights or to ask you to surrender these rights. These 52 | restrictions translate to certain responsibilities for you if you distribute 53 | copies of the library or if you modify it. 54 | 55 | For example, if you distribute copies of the library, whether gratis or for a 56 | fee, you must give the recipients all the rights that we gave you. You must make 57 | sure that they, too, receive or can get the source code. If you link other code 58 | with the library, you must provide complete object files to the recipients, so 59 | that they can relink them with the library after making changes to the library 60 | and recompiling it. And you must show them these terms so they know their 61 | rights. 62 | 63 | We protect your rights with a two-step method: (1) we copyright the library, and 64 | (2) we offer you this license, which gives you legal permission to copy, 65 | distribute and/or modify the library. 66 | 67 | To protect each distributor, we want to make it very clear that there is no 68 | warranty for the free library. Also, if the library is modified by someone else 69 | and passed on, the recipients should know that what they have is not the 70 | original version, so that the original author's reputation will not be affected 71 | by problems that might be introduced by others. 72 | 73 | Finally, software patents pose a constant threat to the existence of any free 74 | program. We wish to make sure that a company cannot effectively restrict the 75 | users of a free program by obtaining a restrictive license from a patent 76 | holder. Therefore, we insist that any patent license obtained for a version of 77 | the library must be consistent with the full freedom of use specified in this 78 | license. 79 | 80 | Most GNU software, including some libraries, is covered by the ordinary GNU 81 | General Public License. This license, the GNU Lesser General Public License, 82 | applies to certain designated libraries, and is quite different from the 83 | ordinary General Public License. We use this license for certain libraries in 84 | order to permit linking those libraries into non-free programs. 85 | 86 | When a program is linked with a library, whether statically or using a shared 87 | library, the combination of the two is legally speaking a combined work, a 88 | derivative of the original library. The ordinary General Public License 89 | therefore permits such linking only if the entire combination fits its criteria 90 | of freedom. The Lesser General Public License permits more lax criteria for 91 | linking other code with the library. 92 | 93 | We call this license the “Lesser” General Public License because it does Less to 94 | protect the user's freedom than the ordinary General Public License. It also 95 | provides other free software developers Less of an advantage over competing 96 | non-free programs. These disadvantages are the reason we use the ordinary 97 | General Public License for many libraries. However, the Lesser license provides 98 | advantages in certain special circumstances. 99 | 100 | For example, on rare occasions, there may be a special need to encourage the 101 | widest possible use of a certain library, so that it becomes a de-facto 102 | standard. To achieve this, non-free programs must be allowed to use the 103 | library. A more frequent case is that a free library does the same job as widely 104 | used non-free libraries. In this case, there is little to gain by limiting the 105 | free library to free software only, so we use the Lesser General Public License. 106 | 107 | In other cases, permission to use a particular library in non-free programs 108 | enables a greater number of people to use a large body of free software. For 109 | example, permission to use the GNU C Library in non-free programs enables many 110 | more people to use the whole GNU operating system, as well as its variant, the 111 | GNU/Linux operating system. 112 | 113 | Although the Lesser General Public License is Less protective of the users' 114 | freedom, it does ensure that the user of a program that is linked with the 115 | Library has the freedom and the wherewithal to run that program using a modified 116 | version of the Library. 117 | 118 | The precise terms and conditions for copying, distribution and modification 119 | follow. Pay close attention to the difference between a “work based on the 120 | library” and a “work that uses the library”. The former contains code derived 121 | from the library, whereas the latter must be combined with the library in order 122 | to run. 123 | 124 | TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 125 | 126 | 0. This License Agreement applies to any software library or other program which 127 | contains a notice placed by the copyright holder or other authorized party 128 | saying it may be distributed under the terms of this Lesser General Public 129 | License (also called “this License”). Each licensee is addressed as “you”. 130 | 131 | A “library” means a collection of software functions and/or data prepared so 132 | as to be conveniently linked with application programs (which use some of 133 | those functions and data) to form executables. 134 | 135 | The “Library”, below, refers to any such software library or work which has 136 | been distributed under these terms. A “work based on the Library” means 137 | either the Library or any derivative work under copyright law: that is to 138 | say, a work containing the Library or a portion of it, either verbatim or 139 | with modifications and/or translated straightforwardly into another 140 | language. (Hereinafter, translation is included without limitation in the 141 | term “modification”.) 142 | 143 | “Source code” for a work means the preferred form of the work for making 144 | modifications to it. For a library, complete source code means all the source 145 | code for all modules it contains, plus any associated interface definition 146 | files, plus the scripts used to control compilation and installation of the 147 | library. 148 | 149 | Activities other than copying, distribution and modification are not covered 150 | by this License; they are outside its scope. The act of running a program 151 | using the Library is not restricted, and output from such a program is 152 | covered only if its contents constitute a work based on the Library 153 | (independent of the use of the Library in a tool for writing it). Whether 154 | that is true depends on what the Library does and what the program that uses 155 | the Library does. 156 | 157 | 1. You may copy and distribute verbatim copies of the Library's complete source 158 | code as you receive it, in any medium, provided that you conspicuously and 159 | appropriately publish on each copy an appropriate copyright notice and 160 | disclaimer of warranty; keep intact all the notices that refer to this 161 | License and to the absence of any warranty; and distribute a copy of this 162 | License along with the Library. 163 | 164 | You may charge a fee for the physical act of transferring a copy, and you may 165 | at your option offer warranty protection in exchange for a fee. 166 | 167 | 2. You may modify your copy or copies of the Library or any portion of it, thus 168 | forming a work based on the Library, and copy and distribute such 169 | modifications or work under the terms of Section 1 above, provided that you 170 | also meet all of these conditions: 171 | 172 | a) The modified work must itself be a software library. 173 | 174 | b) You must cause the files modified to carry prominent notices stating that 175 | you changed the files and the date of any change. 176 | 177 | c) You must cause the whole of the work to be licensed at no charge to all 178 | third parties under the terms of this License. 179 | 180 | d) If a facility in the modified Library refers to a function or a table of 181 | data to be supplied by an application program that uses the facility, other 182 | than as an argument passed when the facility is invoked, then you must make a 183 | good faith effort to ensure that, in the event an application does not supply 184 | such function or table, the facility still operates, and performs whatever 185 | part of its purpose remains meaningful. 186 | 187 | (For example, a function in a library to compute square roots has a purpose 188 | that is entirely well-defined independent of the application. Therefore, 189 | Subsection 2d requires that any application-supplied function or table used 190 | by this function must be optional: if the application does not supply it, the 191 | square root function must still compute square roots.) 192 | 193 | These requirements apply to the modified work as a whole. If identifiable 194 | sections of that work are not derived from the Library, and can be reasonably 195 | considered independent and separate works in themselves, then this License, 196 | and its terms, do not apply to those sections when you distribute them as 197 | separate works. But when you distribute the same sections as part of a whole 198 | which is a work based on the Library, the distribution of the whole must be 199 | on the terms of this License, whose permissions for other licensees extend to 200 | the entire whole, and thus to each and every part regardless of who wrote it. 201 | 202 | Thus, it is not the intent of this section to claim rights or contest your 203 | rights to work written entirely by you; rather, the intent is to exercise the 204 | right to control the distribution of derivative or collective works based on 205 | the Library. 206 | 207 | In addition, mere aggregation of another work not based on the Library with 208 | the Library (or with a work based on the Library) on a volume of a storage or 209 | distribution medium does not bring the other work under the scope of this 210 | License. 211 | 212 | 3. You may opt to apply the terms of the ordinary GNU General Public License 213 | instead of this License to a given copy of the Library. To do this, you must 214 | alter all the notices that refer to this License, so that they refer to the 215 | ordinary GNU General Public License, version 2, instead of to this 216 | License. (If a newer version than version 2 of the ordinary GNU General 217 | Public License has appeared, then you can specify that version instead if you 218 | wish.) Do not make any other change in these notices. 219 | 220 | Once this change is made in a given copy, it is irreversible for that copy, 221 | so the ordinary GNU General Public License applies to all subsequent copies 222 | and derivative works made from that copy. 223 | 224 | This option is useful when you wish to copy part of the code of the Library 225 | into a program that is not a library. 226 | 227 | 4. You may copy and distribute the Library (or a portion or derivative of it, 228 | under Section 2) in object code or executable form under the terms of 229 | Sections 1 and 2 above provided that you accompany it with the complete 230 | corresponding machine-readable source code, which must be distributed under 231 | the terms of Sections 1 and 2 above on a medium customarily used for software 232 | interchange. 233 | 234 | If distribution of object code is made by offering access to copy from a 235 | designated place, then offering equivalent access to copy the source code 236 | from the same place satisfies the requirement to distribute the source code, 237 | even though third parties are not compelled to copy the source along with the 238 | object code. 239 | 240 | 5. A program that contains no derivative of any portion of the Library, but is 241 | designed to work with the Library by being compiled or linked with it, is 242 | called a “work that uses the Library”. Such a work, in isolation, is not a 243 | derivative work of the Library, and therefore falls outside the scope of this 244 | License. 245 | 246 | However, linking a “work that uses the Library” with the Library creates an 247 | executable that is a derivative of the Library (because it contains portions 248 | of the Library), rather than a “work that uses the library”. The executable 249 | is therefore covered by this License. Section 6 states terms for distribution 250 | of such executables. 251 | 252 | When a “work that uses the Library” uses material from a header file that is 253 | part of the Library, the object code for the work may be a derivative work of 254 | the Library even though the source code is not. Whether this is true is 255 | especially significant if the work can be linked without the Library, or if 256 | the work is itself a library. The threshold for this to be true is not 257 | precisely defined by law. 258 | 259 | If such an object file uses only numerical parameters, data structure layouts 260 | and accessors, and small macros and small inline functions (ten lines or less 261 | in length), then the use of the object file is unrestricted, regardless of 262 | whether it is legally a derivative work. (Executables containing this object 263 | code plus portions of the Library will still fall under Section 6.) 264 | 265 | Otherwise, if the work is a derivative of the Library, you may distribute the 266 | object code for the work under the terms of Section 6. Any executables 267 | containing that work also fall under Section 6, whether or not they are 268 | linked directly with the Library itself. 269 | 270 | 6. As an exception to the Sections above, you may also combine or link a “work 271 | that uses the Library” with the Library to produce a work containing portions 272 | of the Library, and distribute that work under terms of your choice, provided 273 | that the terms permit modification of the work for the customer's own use and 274 | reverse engineering for debugging such modifications. 275 | 276 | You must give prominent notice with each copy of the work that the Library is 277 | used in it and that the Library and its use are covered by this License. You 278 | must supply a copy of this License. If the work during execution displays 279 | copyright notices, you must include the copyright notice for the Library 280 | among them, as well as a reference directing the user to the copy of this 281 | License. Also, you must do one of these things: 282 | 283 | a) Accompany the work with the complete corresponding machine-readable source 284 | code for the Library including whatever changes were used in the work (which 285 | must be distributed under Sections 1 and 2 above); and, if the work is an 286 | executable linked with the Library, with the complete machine-readable “work 287 | that uses the Library”, as object code and/or source code, so that the user 288 | can modify the Library and then relink to produce a modified executable 289 | containing the modified Library. (It is understood that the user who changes 290 | the contents of definitions files in the Library will not necessarily be able 291 | to recompile the application to use the modified definitions.) 292 | 293 | b) Use a suitable shared library mechanism for linking with the Library. A 294 | suitable mechanism is one that (1) uses at run time a copy of the library 295 | already present on the user's computer system, rather than copying library 296 | functions into the executable, and (2) will operate properly with a modified 297 | version of the library, if the user installs one, as long as the modified 298 | version is interface-compatible with the version that the work was made with. 299 | 300 | c) Accompany the work with a written offer, valid for at least three years, 301 | to give the same user the materials specified in Subsection 6a, above, for a 302 | charge no more than the cost of performing this distribution. 303 | 304 | d) If distribution of the work is made by offering access to copy from a 305 | designated place, offer equivalent access to copy the above specified 306 | materials from the same place. 307 | 308 | e) Verify that the user has already received a copy of these materials or 309 | that you have already sent this user a copy. 310 | 311 | For an executable, the required form of the “work that uses the Library” must 312 | include any data and utility programs needed for reproducing the executable 313 | from it. However, as a special exception, the materials to be distributed 314 | need not include anything that is normally distributed (in either source or 315 | binary form) with the major components (compiler, kernel, and so on) of the 316 | operating system on which the executable runs, unless that component itself 317 | accompanies the executable. 318 | 319 | It may happen that this requirement contradicts the license restrictions of 320 | other proprietary libraries that do not normally accompany the operating 321 | system. Such a contradiction means you cannot use both them and the Library 322 | together in an executable that you distribute. 323 | 324 | 7. You may place library facilities that are a work based on the Library 325 | side-by-side in a single library together with other library facilities not 326 | covered by this License, and distribute such a combined library, provided 327 | that the separate distribution of the work based on the Library and of the 328 | other library facilities is otherwise permitted, and provided that you do 329 | these two things: 330 | 331 | a) Accompany the combined library with a copy of the same work based on the 332 | Library, uncombined with any other library facilities. This must be 333 | distributed under the terms of the Sections above. 334 | 335 | b) Give prominent notice with the combined library of the fact that part of 336 | it is a work based on the Library, and explaining where to find the 337 | accompanying uncombined form of the same work. 338 | 339 | 8. You may not copy, modify, sublicense, link with, or distribute the Library 340 | except as expressly provided under this License. Any attempt otherwise to 341 | copy, modify, sublicense, link with, or distribute the Library is void, and 342 | will automatically terminate your rights under this License. However, parties 343 | who have received copies, or rights, from you under this License will not 344 | have their licenses terminated so long as such parties remain in full 345 | compliance. 346 | 347 | 9. You are not required to accept this License, since you have not signed 348 | it. However, nothing else grants you permission to modify or distribute the 349 | Library or its derivative works. These actions are prohibited by law if you 350 | do not accept this License. Therefore, by modifying or distributing the 351 | Library (or any work based on the Library), you indicate your acceptance of 352 | this License to do so, and all its terms and conditions for copying, 353 | distributing or modifying the Library or works based on it. 354 | 355 | 10. Each time you redistribute the Library (or any work based on the Library), 356 | the recipient automatically receives a license from the original licensor to 357 | copy, distribute, link with or modify the Library subject to these terms and 358 | conditions. You may not impose any further restrictions on the recipients' 359 | exercise of the rights granted herein. You are not responsible for enforcing 360 | compliance by third parties with this License. 361 | 362 | 11. If, as a consequence of a court judgment or allegation of patent 363 | infringement or for any other reason (not limited to patent issues), 364 | conditions are imposed on you (whether by court order, agreement or 365 | otherwise) that contradict the conditions of this License, they do not 366 | excuse you from the conditions of this License. If you cannot distribute so 367 | as to satisfy simultaneously your obligations under this License and any 368 | other pertinent obligations, then as a consequence you may not distribute 369 | the Library at all. For example, if a patent license would not permit 370 | royalty-free redistribution of the Library by all those who receive copies 371 | directly or indirectly through you, then the only way you could satisfy both 372 | it and this License would be to refrain entirely from distribution of the 373 | Library. 374 | 375 | If any portion of this section is held invalid or unenforceable under any 376 | particular circumstance, the balance of the section is intended to apply, 377 | and the section as a whole is intended to apply in other circumstances. 378 | 379 | It is not the purpose of this section to induce you to infringe any patents 380 | or other property right claims or to contest validity of any such claims; 381 | this section has the sole purpose of protecting the integrity of the free 382 | software distribution system which is implemented by public license 383 | practices. Many people have made generous contributions to the wide range of 384 | software distributed through that system in reliance on consistent 385 | application of that system; it is up to the author/donor to decide if he or 386 | she is willing to distribute software through any other system and a 387 | licensee cannot impose that choice. 388 | 389 | This section is intended to make thoroughly clear what is believed to be a 390 | consequence of the rest of this License. 391 | 392 | 12. If the distribution and/or use of the Library is restricted in certain 393 | countries either by patents or by copyrighted interfaces, the original 394 | copyright holder who places the Library under this License may add an 395 | explicit geographical distribution limitation excluding those countries, so 396 | that distribution is permitted only in or among countries not thus 397 | excluded. In such case, this License incorporates the limitation as if 398 | written in the body of this License. 399 | 400 | 13. The Free Software Foundation may publish revised and/or new versions of the 401 | Lesser General Public License from time to time. Such new versions will be 402 | similar in spirit to the present version, but may differ in detail to 403 | address new problems or concerns. 404 | 405 | Each version is given a distinguishing version number. If the Library 406 | specifies a version number of this License which applies to it and “any 407 | later version”, you have the option of following the terms and conditions 408 | either of that version or of any later version published by the Free 409 | Software Foundation. If the Library does not specify a license version 410 | number, you may choose any version ever published by the Free Software 411 | Foundation. 412 | 413 | 14. If you wish to incorporate parts of the Library into other free programs 414 | whose distribution conditions are incompatible with these, write to the 415 | author to ask for permission. For software which is copyrighted by the Free 416 | Software Foundation, write to the Free Software Foundation; we sometimes 417 | make exceptions for this. Our decision will be guided by the two goals of 418 | preserving the free status of all derivatives of our free software and of 419 | promoting the sharing and reuse of software generally. 420 | 421 | NO WARRANTY 422 | 423 | 15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE 424 | LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE 425 | STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE 426 | LIBRARY “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, 427 | INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND 428 | FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND 429 | PERFORMANCE OF THE LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, 430 | YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 431 | 432 | 16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL 433 | ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE 434 | THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY 435 | GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE 436 | OR INABILITY TO USE THE LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA 437 | OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD 438 | PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), 439 | EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF 440 | SUCH DAMAGES. 441 | 442 | END OF TERMS AND CONDITIONS 443 | 444 | How to Apply These Terms to Your New Libraries 445 | 446 | If you develop a new library, and you want it to be of the greatest possible use 447 | to the public, we recommend making it free software that everyone can 448 | redistribute and change. You can do so by permitting redistribution under these 449 | terms (or, alternatively, under the terms of the ordinary General Public 450 | License). 451 | 452 | To apply these terms, attach the following notices to the library. It is safest 453 | to attach them to the start of each source file to most effectively convey the 454 | exclusion of warranty; and each file should have at least the “copyright” line 455 | and a pointer to where the full notice is found. 456 | 457 | 458 | Copyright (C) 459 | 460 | This library is free software; you can redistribute it and/or modify it under 461 | the terms of the GNU Lesser General Public License as published by the Free 462 | Software Foundation; either version 2.1 of the License, or (at your option) any 463 | later version. 464 | 465 | This library is distributed in the hope that it will be useful, but WITHOUT ANY 466 | WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A 467 | PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. 468 | 469 | You should have received a copy of the GNU Lesser General Public License along 470 | with this library; if not, write to the Free Software Foundation, Inc., 51 471 | Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Also add information on 472 | how to contact you by electronic and paper mail. 473 | 474 | You should also get your employer (if you work as a programmer) or your school, 475 | if any, to sign a “copyright disclaimer” for the library, if necessary. Here is 476 | a sample; alter the names: 477 | 478 | Yoyodyne, Inc., hereby disclaims all copyright interest in the library `Frob' (a 479 | library for tweaking knobs) written by James Random Hacker. 480 | 481 | , 1 April 1990 482 | Ty Coon, President of Vice 483 | 484 | That's all there is to it! 485 | ``` 486 | 487 | ## BSD 2-clause Licenses 488 | 489 | BSD 2-clause "Simplified" License is applicable to the following component(s): 490 | 491 | ### https://github.com/syndtr/gocapability 492 | 493 | ``` 494 | Copyright 2013 Suryandaru Triandana 495 | All rights reserved. 496 | 497 | Redistribution and use in source and binary forms, with or without 498 | modification, are permitted provided that the following conditions are 499 | met: 500 | 501 | * Redistributions of source code must retain the above copyright 502 | notice, this list of conditions and the following disclaimer. 503 | * Redistributions in binary form must reproduce the above copyright 504 | notice, this list of conditions and the following disclaimer in the 505 | documentation and/or other materials provided with the distribution. 506 | 507 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 508 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 509 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 510 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 511 | HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 512 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 513 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 514 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 515 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 516 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 517 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 518 | ``` 519 | 520 | ### https://github.com/godbus/dbus 521 | 522 | ``` 523 | Copyright (c) 2013, Georg Reinke (), Google 524 | All rights reserved. 525 | 526 | Redistribution and use in source and binary forms, with or without 527 | modification, are permitted provided that the following conditions 528 | are met: 529 | 530 | 1. Redistributions of source code must retain the above copyright notice, 531 | this list of conditions and the following disclaimer. 532 | 533 | 2. Redistributions in binary form must reproduce the above copyright 534 | notice, this list of conditions and the following disclaimer in the 535 | documentation and/or other materials provided with the distribution. 536 | 537 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 538 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 539 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 540 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 541 | HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 542 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED 543 | TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 544 | PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 545 | LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 546 | NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 547 | SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 548 | ``` 549 | 550 | ### https://github.com/pkg/errors 551 | ### https://github.com/pkg/profile 552 | 553 | ``` 554 | Copyright (c) 2015, Dave Cheney 555 | All rights reserved. 556 | 557 | Redistribution and use in source and binary forms, with or without 558 | modification, are permitted provided that the following conditions are met: 559 | 560 | * Redistributions of source code must retain the above copyright notice, this 561 | list of conditions and the following disclaimer. 562 | 563 | * Redistributions in binary form must reproduce the above copyright notice, 564 | this list of conditions and the following disclaimer in the documentation 565 | and/or other materials provided with the distribution. 566 | 567 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 568 | AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 569 | IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 570 | DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE 571 | FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 572 | DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 573 | SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 574 | CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 575 | OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 576 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 577 | ``` 578 | 579 | ### https://github.com/seccomp/libseccomp-golang 580 | 581 | ``` 582 | Copyright (c) 2015 Matthew Heon 583 | Copyright (c) 2015 Paul Moore 584 | All rights reserved. 585 | 586 | Redistribution and use in source and binary forms, with or without 587 | modification, are permitted provided that the following conditions are met: 588 | - Redistributions of source code must retain the above copyright notice, 589 | this list of conditions and the following disclaimer. 590 | - Redistributions in binary form must reproduce the above copyright notice, 591 | this list of conditions and the following disclaimer in the documentation 592 | and/or other materials provided with the distribution. 593 | 594 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND 595 | ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 596 | WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 597 | DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE 598 | FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 599 | DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 600 | SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 601 | CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 602 | OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 603 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 604 | ``` 605 | 606 | ### https://github.com/russross/blackfriday 607 | 608 | ``` 609 | Blackfriday is distributed under the Simplified BSD License: 610 | 611 | Copyright © 2011 Russ Ross 612 | All rights reserved. 613 | 614 | Redistribution and use in source and binary forms, with or without 615 | modification, are permitted provided that the following conditions 616 | are met: 617 | 618 | 1. Redistributions of source code must retain the above copyright 619 | notice, this list of conditions and the following disclaimer. 620 | 2. Redistributions in binary form must reproduce the above 621 | copyright notice, this list of conditions and the following 622 | disclaimer in the documentation and/or other materials provided with 623 | the distribution. 624 | 625 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 626 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 627 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS 628 | FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE 629 | COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, 630 | INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, 631 | BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 632 | LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 633 | CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 634 | LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN 635 | ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 636 | POSSIBILITY OF SUCH DAMAGE. 637 | ``` 638 | 639 | ### https://github.com/karrick/godirwalk 640 | 641 | ``` 642 | BSD 2-Clause License 643 | 644 | Copyright (c) 2017, Karrick McDermott 645 | All rights reserved. 646 | 647 | Redistribution and use in source and binary forms, with or without 648 | modification, are permitted provided that the following conditions are met: 649 | 650 | * Redistributions of source code must retain the above copyright notice, this 651 | list of conditions and the following disclaimer. 652 | 653 | * Redistributions in binary form must reproduce the above copyright notice, 654 | this list of conditions and the following disclaimer in the documentation 655 | and/or other materials provided with the distribution. 656 | 657 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 658 | AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 659 | IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 660 | DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE 661 | FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 662 | DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 663 | SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 664 | CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 665 | OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 666 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 667 | ``` 668 | 669 | ## BSD 3-clause Licenses 670 | 671 | BSD 3-clause "New" or "Revised" License is applicable to the following component(s): 672 | 673 | ### https://github.com/golang/go 674 | ### https://golang.org/x/net 675 | ### https://golang.org/x/sys 676 | ### https://golang.org/x/text 677 | 678 | ``` 679 | Copyright (c) 2009 The Go Authors. All rights reserved. 680 | 681 | Redistribution and use in source and binary forms, with or without 682 | modification, are permitted provided that the following conditions are 683 | met: 684 | 685 | * Redistributions of source code must retain the above copyright 686 | notice, this list of conditions and the following disclaimer. 687 | * Redistributions in binary form must reproduce the above 688 | copyright notice, this list of conditions and the following disclaimer 689 | in the documentation and/or other materials provided with the 690 | distribution. 691 | * Neither the name of Google Inc. nor the names of its 692 | contributors may be used to endorse or promote products derived from 693 | this software without specific prior written permission. 694 | 695 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 696 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 697 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 698 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 699 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 700 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 701 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 702 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 703 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 704 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 705 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 706 | ``` 707 | 708 | ### https://github.com/cyphar/filepath-securejoin 709 | 710 | ``` 711 | Copyright (C) 2014-2015 Docker Inc & Go Authors. All rights reserved. 712 | Copyright (C) 2017 SUSE LLC. All rights reserved. 713 | 714 | Redistribution and use in source and binary forms, with or without 715 | modification, are permitted provided that the following conditions are 716 | met: 717 | 718 | * Redistributions of source code must retain the above copyright 719 | notice, this list of conditions and the following disclaimer. 720 | * Redistributions in binary form must reproduce the above 721 | copyright notice, this list of conditions and the following disclaimer 722 | in the documentation and/or other materials provided with the 723 | distribution. 724 | * Neither the name of Google Inc. nor the names of its 725 | contributors may be used to endorse or promote products derived from 726 | this software without specific prior written permission. 727 | 728 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 729 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 730 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 731 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 732 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 733 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 734 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 735 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 736 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 737 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 738 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 739 | ``` 740 | 741 | ### https://github.com/protocolbuffers/protobuf 742 | 743 | ``` 744 | Copyright 2008 Google Inc. All rights reserved. 745 | 746 | Redistribution and use in source and binary forms, with or without 747 | modification, are permitted provided that the following conditions are 748 | met: 749 | 750 | * Redistributions of source code must retain the above copyright 751 | notice, this list of conditions and the following disclaimer. 752 | * Redistributions in binary form must reproduce the above 753 | copyright notice, this list of conditions and the following disclaimer 754 | in the documentation and/or other materials provided with the 755 | distribution. 756 | * Neither the name of Google Inc. nor the names of its 757 | contributors may be used to endorse or promote products derived from 758 | this software without specific prior written permission. 759 | 760 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 761 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 762 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 763 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 764 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 765 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 766 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 767 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 768 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 769 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 770 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 771 | 772 | Code generated by the Protocol Buffer compiler is owned by the owner 773 | of the input file used when generating it. This code is not 774 | standalone and requires a support library to be linked with it. This 775 | support library is itself covered by the above license. 776 | ``` 777 | 778 | ### https://github.com/willf/bitset 779 | 780 | ``` 781 | Copyright (c) 2014 Will Fitzgerald. All rights reserved. 782 | 783 | Redistribution and use in source and binary forms, with or without 784 | modification, are permitted provided that the following conditions are 785 | met: 786 | 787 | * Redistributions of source code must retain the above copyright 788 | notice, this list of conditions and the following disclaimer. 789 | * Redistributions in binary form must reproduce the above 790 | copyright notice, this list of conditions and the following disclaimer 791 | in the documentation and/or other materials provided with the 792 | distribution. 793 | * Neither the name of Google Inc. nor the names of its 794 | contributors may be used to endorse or promote products derived from 795 | this software without specific prior written permission. 796 | 797 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 798 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 799 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 800 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 801 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 802 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 803 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 804 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 805 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 806 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 807 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 808 | ``` 809 | 810 | ### https://github.com/pmezard/go-difflib 811 | 812 | ``` 813 | Copyright (c) 2013, Patrick Mezard 814 | All rights reserved. 815 | 816 | Redistribution and use in source and binary forms, with or without 817 | modification, are permitted provided that the following conditions are 818 | met: 819 | 820 | Redistributions of source code must retain the above copyright 821 | notice, this list of conditions and the following disclaimer. 822 | Redistributions in binary form must reproduce the above copyright 823 | notice, this list of conditions and the following disclaimer in the 824 | documentation and/or other materials provided with the distribution. 825 | The names of its contributors may not be used to endorse or promote 826 | products derived from this software without specific prior written 827 | permission. 828 | 829 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS 830 | IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 831 | TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A 832 | PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 833 | HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 834 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED 835 | TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 836 | PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF 837 | LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING 838 | NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 839 | SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 840 | ``` 841 | 842 | ### https://github.com/fsnotify/fsnotify 843 | 844 | ``` 845 | Copyright (c) 2012 The Go Authors. All rights reserved. 846 | Copyright (c) 2012-2019 fsnotify Authors. All rights reserved. 847 | 848 | Redistribution and use in source and binary forms, with or without 849 | modification, are permitted provided that the following conditions are 850 | met: 851 | 852 | * Redistributions of source code must retain the above copyright 853 | notice, this list of conditions and the following disclaimer. 854 | * Redistributions in binary form must reproduce the above 855 | copyright notice, this list of conditions and the following disclaimer 856 | in the documentation and/or other materials provided with the 857 | distribution. 858 | * Neither the name of Google Inc. nor the names of its 859 | contributors may be used to endorse or promote products derived from 860 | this software without specific prior written permission. 861 | 862 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 863 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 864 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 865 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 866 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 867 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 868 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 869 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 870 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 871 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 872 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 873 | ``` 874 | 875 | ### https://github.com/gogo/protobuf 876 | 877 | ``` 878 | Copyright (c) 2013, The GoGo Authors. All rights reserved. 879 | 880 | Protocol Buffers for Go with Gadgets 881 | 882 | Go support for Protocol Buffers - Google's data interchange format 883 | 884 | Copyright 2010 The Go Authors. All rights reserved. 885 | https://github.com/golang/protobuf 886 | 887 | Redistribution and use in source and binary forms, with or without 888 | modification, are permitted provided that the following conditions are 889 | met: 890 | 891 | * Redistributions of source code must retain the above copyright 892 | notice, this list of conditions and the following disclaimer. 893 | * Redistributions in binary form must reproduce the above 894 | copyright notice, this list of conditions and the following disclaimer 895 | in the documentation and/or other materials provided with the 896 | distribution. 897 | * Neither the name of Google Inc. nor the names of its 898 | contributors may be used to endorse or promote products derived from 899 | this software without specific prior written permission. 900 | 901 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 902 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 903 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 904 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 905 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 906 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 907 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 908 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 909 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 910 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 911 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 912 | ``` 913 | 914 | ### https://github.com/golang/protobuf 915 | 916 | ``` 917 | Copyright 2010 The Go Authors. All rights reserved. 918 | 919 | Redistribution and use in source and binary forms, with or without 920 | modification, are permitted provided that the following conditions are 921 | met: 922 | 923 | * Redistributions of source code must retain the above copyright 924 | notice, this list of conditions and the following disclaimer. 925 | * Redistributions in binary form must reproduce the above 926 | copyright notice, this list of conditions and the following disclaimer 927 | in the documentation and/or other materials provided with the 928 | distribution. 929 | * Neither the name of Google Inc. nor the names of its 930 | contributors may be used to endorse or promote products derived from 931 | this software without specific prior written permission. 932 | 933 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 934 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 935 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 936 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 937 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 938 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 939 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 940 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 941 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 942 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 943 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 944 | ``` 945 | 946 | ### https://github.com/google/uuid 947 | 948 | ``` 949 | Copyright (c) 2009,2014 Google Inc. All rights reserved. 950 | 951 | Redistribution and use in source and binary forms, with or without 952 | modification, are permitted provided that the following conditions are 953 | met: 954 | 955 | * Redistributions of source code must retain the above copyright 956 | notice, this list of conditions and the following disclaimer. 957 | * Redistributions in binary form must reproduce the above 958 | copyright notice, this list of conditions and the following disclaimer 959 | in the documentation and/or other materials provided with the 960 | distribution. 961 | * Neither the name of Google Inc. nor the names of its 962 | contributors may be used to endorse or promote products derived from 963 | this software without specific prior written permission. 964 | 965 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 966 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 967 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 968 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 969 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 970 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 971 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 972 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 973 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 974 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 975 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 976 | ``` 977 | 978 | ### https://github.com/bazil/fuse 979 | 980 | ``` 981 | Copyright (c) 2013-2019 Tommi Virtanen. 982 | Copyright (c) 2009, 2011, 2012 The Go Authors. 983 | All rights reserved. 984 | 985 | Redistribution and use in source and binary forms, with or without 986 | modification, are permitted provided that the following conditions are 987 | met: 988 | 989 | * Redistributions of source code must retain the above copyright 990 | notice, this list of conditions and the following disclaimer. 991 | * Redistributions in binary form must reproduce the above 992 | copyright notice, this list of conditions and the following disclaimer 993 | in the documentation and/or other materials provided with the 994 | distribution. 995 | * Neither the name of Google Inc. nor the names of its 996 | contributors may be used to endorse or promote products derived from 997 | this software without specific prior written permission. 998 | 999 | THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS 1000 | "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT 1001 | LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR 1002 | A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT 1003 | OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 1004 | SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT 1005 | LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 1006 | DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 1007 | THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 1008 | (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 1009 | OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 1010 | 1011 | 1012 | 1013 | The following included software components have additional copyright 1014 | notices and license terms that may differ from the above. 1015 | 1016 | 1017 | File fuse.go: 1018 | 1019 | // Adapted from Plan 9 from User Space's src/cmd/9pfuse/fuse.c, 1020 | // which carries this notice: 1021 | // 1022 | // The files in this directory are subject to the following license. 1023 | // 1024 | // The author of this software is Russ Cox. 1025 | // 1026 | // Copyright (c) 2006 Russ Cox 1027 | // 1028 | // Permission to use, copy, modify, and distribute this software for any 1029 | // purpose without fee is hereby granted, provided that this entire notice 1030 | // is included in all copies of any software which is or includes a copy 1031 | // or modification of this software and in all copies of the supporting 1032 | // documentation for such software. 1033 | // 1034 | // THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR IMPLIED 1035 | // WARRANTY. IN PARTICULAR, THE AUTHOR MAKES NO REPRESENTATION OR WARRANTY 1036 | // OF ANY KIND CONCERNING THE MERCHANTABILITY OF THIS SOFTWARE OR ITS 1037 | // FITNESS FOR ANY PARTICULAR PURPOSE. 1038 | 1039 | 1040 | File fuse_kernel.go: 1041 | 1042 | // Derived from FUSE's fuse_kernel.h 1043 | /* 1044 | This file defines the kernel interface of FUSE 1045 | Copyright (C) 2001-2007 Miklos Szeredi 1046 | 1047 | 1048 | This -- and only this -- header file may also be distributed under 1049 | the terms of the BSD Licence as follows: 1050 | 1051 | Copyright (C) 2001-2007 Miklos Szeredi. All rights reserved. 1052 | 1053 | Redistribution and use in source and binary forms, with or without 1054 | modification, are permitted provided that the following conditions 1055 | are met: 1056 | 1. Redistributions of source code must retain the above copyright 1057 | notice, this list of conditions and the following disclaimer. 1058 | 2. Redistributions in binary form must reproduce the above copyright 1059 | notice, this list of conditions and the following disclaimer in the 1060 | documentation and/or other materials provided with the distribution. 1061 | 1062 | THIS SOFTWARE IS PROVIDED BY AUTHOR AND CONTRIBUTORS ``AS IS'' AND 1063 | ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 1064 | IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 1065 | ARE DISCLAIMED. IN NO EVENT SHALL AUTHOR OR CONTRIBUTORS BE LIABLE 1066 | FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 1067 | DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 1068 | OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 1069 | HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 1070 | LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 1071 | OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 1072 | SUCH DAMAGE. 1073 | */ 1074 | ``` 1075 | 1076 | ## Mozilla Public License 2.0 1077 | 1078 | Mozilla Public License 2.0 is applicable to the following component(s): 1079 | 1080 | ### https://github.com/hashicorp/go-immutable-radix 1081 | ### https://github.com/hashicorp/golang-lru/simplelru 1082 | 1083 | ``` 1084 | Mozilla Public License, version 2.0 1085 | 1086 | 1. Definitions 1087 | 1088 | 1.1. "Contributor" 1089 | 1090 | means each individual or legal entity that creates, contributes to the 1091 | creation of, or owns Covered Software. 1092 | 1093 | 1.2. "Contributor Version" 1094 | 1095 | means the combination of the Contributions of others (if any) used by a 1096 | Contributor and that particular Contributor's Contribution. 1097 | 1098 | 1.3. "Contribution" 1099 | 1100 | means Covered Software of a particular Contributor. 1101 | 1102 | 1.4. "Covered Software" 1103 | 1104 | means Source Code Form to which the initial Contributor has attached the 1105 | notice in Exhibit A, the Executable Form of such Source Code Form, and 1106 | Modifications of such Source Code Form, in each case including portions 1107 | thereof. 1108 | 1109 | 1.5. "Incompatible With Secondary Licenses" 1110 | means 1111 | 1112 | a. that the initial Contributor has attached the notice described in 1113 | Exhibit B to the Covered Software; or 1114 | 1115 | b. that the Covered Software was made available under the terms of 1116 | version 1.1 or earlier of the License, but not also under the terms of 1117 | a Secondary License. 1118 | 1119 | 1.6. "Executable Form" 1120 | 1121 | means any form of the work other than Source Code Form. 1122 | 1123 | 1.7. "Larger Work" 1124 | 1125 | means a work that combines Covered Software with other material, in a 1126 | separate file or files, that is not Covered Software. 1127 | 1128 | 1.8. "License" 1129 | 1130 | means this document. 1131 | 1132 | 1.9. "Licensable" 1133 | 1134 | means having the right to grant, to the maximum extent possible, whether 1135 | at the time of the initial grant or subsequently, any and all of the 1136 | rights conveyed by this License. 1137 | 1138 | 1.10. "Modifications" 1139 | 1140 | means any of the following: 1141 | 1142 | a. any file in Source Code Form that results from an addition to, 1143 | deletion from, or modification of the contents of Covered Software; or 1144 | 1145 | b. any new file in Source Code Form that contains any Covered Software. 1146 | 1147 | 1.11. "Patent Claims" of a Contributor 1148 | 1149 | means any patent claim(s), including without limitation, method, 1150 | process, and apparatus claims, in any patent Licensable by such 1151 | Contributor that would be infringed, but for the grant of the License, 1152 | by the making, using, selling, offering for sale, having made, import, 1153 | or transfer of either its Contributions or its Contributor Version. 1154 | 1155 | 1.12. "Secondary License" 1156 | 1157 | means either the GNU General Public License, Version 2.0, the GNU Lesser 1158 | General Public License, Version 2.1, the GNU Affero General Public 1159 | License, Version 3.0, or any later versions of those licenses. 1160 | 1161 | 1.13. "Source Code Form" 1162 | 1163 | means the form of the work preferred for making modifications. 1164 | 1165 | 1.14. "You" (or "Your") 1166 | 1167 | means an individual or a legal entity exercising rights under this 1168 | License. For legal entities, "You" includes any entity that controls, is 1169 | controlled by, or is under common control with You. For purposes of this 1170 | definition, "control" means (a) the power, direct or indirect, to cause 1171 | the direction or management of such entity, whether by contract or 1172 | otherwise, or (b) ownership of more than fifty percent (50%) of the 1173 | outstanding shares or beneficial ownership of such entity. 1174 | 1175 | 1176 | 2. License Grants and Conditions 1177 | 1178 | 2.1. Grants 1179 | 1180 | Each Contributor hereby grants You a world-wide, royalty-free, 1181 | non-exclusive license: 1182 | 1183 | a. under intellectual property rights (other than patent or trademark) 1184 | Licensable by such Contributor to use, reproduce, make available, 1185 | modify, display, perform, distribute, and otherwise exploit its 1186 | Contributions, either on an unmodified basis, with Modifications, or 1187 | as part of a Larger Work; and 1188 | 1189 | b. under Patent Claims of such Contributor to make, use, sell, offer for 1190 | sale, have made, import, and otherwise transfer either its 1191 | Contributions or its Contributor Version. 1192 | 1193 | 2.2. Effective Date 1194 | 1195 | The licenses granted in Section 2.1 with respect to any Contribution 1196 | become effective for each Contribution on the date the Contributor first 1197 | distributes such Contribution. 1198 | 1199 | 2.3. Limitations on Grant Scope 1200 | 1201 | The licenses granted in this Section 2 are the only rights granted under 1202 | this License. No additional rights or licenses will be implied from the 1203 | distribution or licensing of Covered Software under this License. 1204 | Notwithstanding Section 2.1(b) above, no patent license is granted by a 1205 | Contributor: 1206 | 1207 | a. for any code that a Contributor has removed from Covered Software; or 1208 | 1209 | b. for infringements caused by: (i) Your and any other third party's 1210 | modifications of Covered Software, or (ii) the combination of its 1211 | Contributions with other software (except as part of its Contributor 1212 | Version); or 1213 | 1214 | c. under Patent Claims infringed by Covered Software in the absence of 1215 | its Contributions. 1216 | 1217 | This License does not grant any rights in the trademarks, service marks, 1218 | or logos of any Contributor (except as may be necessary to comply with 1219 | the notice requirements in Section 3.4). 1220 | 1221 | 2.4. Subsequent Licenses 1222 | 1223 | No Contributor makes additional grants as a result of Your choice to 1224 | distribute the Covered Software under a subsequent version of this 1225 | License (see Section 10.2) or under the terms of a Secondary License (if 1226 | permitted under the terms of Section 3.3). 1227 | 1228 | 2.5. Representation 1229 | 1230 | Each Contributor represents that the Contributor believes its 1231 | Contributions are its original creation(s) or it has sufficient rights to 1232 | grant the rights to its Contributions conveyed by this License. 1233 | 1234 | 2.6. Fair Use 1235 | 1236 | This License is not intended to limit any rights You have under 1237 | applicable copyright doctrines of fair use, fair dealing, or other 1238 | equivalents. 1239 | 1240 | 2.7. Conditions 1241 | 1242 | Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted in 1243 | Section 2.1. 1244 | 1245 | 1246 | 3. Responsibilities 1247 | 1248 | 3.1. Distribution of Source Form 1249 | 1250 | All distribution of Covered Software in Source Code Form, including any 1251 | Modifications that You create or to which You contribute, must be under 1252 | the terms of this License. You must inform recipients that the Source 1253 | Code Form of the Covered Software is governed by the terms of this 1254 | License, and how they can obtain a copy of this License. You may not 1255 | attempt to alter or restrict the recipients' rights in the Source Code 1256 | Form. 1257 | 1258 | 3.2. Distribution of Executable Form 1259 | 1260 | If You distribute Covered Software in Executable Form then: 1261 | 1262 | a. such Covered Software must also be made available in Source Code Form, 1263 | as described in Section 3.1, and You must inform recipients of the 1264 | Executable Form how they can obtain a copy of such Source Code Form by 1265 | reasonable means in a timely manner, at a charge no more than the cost 1266 | of distribution to the recipient; and 1267 | 1268 | b. You may distribute such Executable Form under the terms of this 1269 | License, or sublicense it under different terms, provided that the 1270 | license for the Executable Form does not attempt to limit or alter the 1271 | recipients' rights in the Source Code Form under this License. 1272 | 1273 | 3.3. Distribution of a Larger Work 1274 | 1275 | You may create and distribute a Larger Work under terms of Your choice, 1276 | provided that You also comply with the requirements of this License for 1277 | the Covered Software. If the Larger Work is a combination of Covered 1278 | Software with a work governed by one or more Secondary Licenses, and the 1279 | Covered Software is not Incompatible With Secondary Licenses, this 1280 | License permits You to additionally distribute such Covered Software 1281 | under the terms of such Secondary License(s), so that the recipient of 1282 | the Larger Work may, at their option, further distribute the Covered 1283 | Software under the terms of either this License or such Secondary 1284 | License(s). 1285 | 1286 | 3.4. Notices 1287 | 1288 | You may not remove or alter the substance of any license notices 1289 | (including copyright notices, patent notices, disclaimers of warranty, or 1290 | limitations of liability) contained within the Source Code Form of the 1291 | Covered Software, except that You may alter any license notices to the 1292 | extent required to remedy known factual inaccuracies. 1293 | 1294 | 3.5. Application of Additional Terms 1295 | 1296 | You may choose to offer, and to charge a fee for, warranty, support, 1297 | indemnity or liability obligations to one or more recipients of Covered 1298 | Software. However, You may do so only on Your own behalf, and not on 1299 | behalf of any Contributor. You must make it absolutely clear that any 1300 | such warranty, support, indemnity, or liability obligation is offered by 1301 | You alone, and You hereby agree to indemnify every Contributor for any 1302 | liability incurred by such Contributor as a result of warranty, support, 1303 | indemnity or liability terms You offer. You may include additional 1304 | disclaimers of warranty and limitations of liability specific to any 1305 | jurisdiction. 1306 | 1307 | 4. Inability to Comply Due to Statute or Regulation 1308 | 1309 | If it is impossible for You to comply with any of the terms of this License 1310 | with respect to some or all of the Covered Software due to statute, 1311 | judicial order, or regulation then You must: (a) comply with the terms of 1312 | this License to the maximum extent possible; and (b) describe the 1313 | limitations and the code they affect. Such description must be placed in a 1314 | text file included with all distributions of the Covered Software under 1315 | this License. Except to the extent prohibited by statute or regulation, 1316 | such description must be sufficiently detailed for a recipient of ordinary 1317 | skill to be able to understand it. 1318 | 1319 | 5. Termination 1320 | 1321 | 5.1. The rights granted under this License will terminate automatically if You 1322 | fail to comply with any of its terms. However, if You become compliant, 1323 | then the rights granted under this License from a particular Contributor 1324 | are reinstated (a) provisionally, unless and until such Contributor 1325 | explicitly and finally terminates Your grants, and (b) on an ongoing 1326 | basis, if such Contributor fails to notify You of the non-compliance by 1327 | some reasonable means prior to 60 days after You have come back into 1328 | compliance. Moreover, Your grants from a particular Contributor are 1329 | reinstated on an ongoing basis if such Contributor notifies You of the 1330 | non-compliance by some reasonable means, this is the first time You have 1331 | received notice of non-compliance with this License from such 1332 | Contributor, and You become compliant prior to 30 days after Your receipt 1333 | of the notice. 1334 | 1335 | 5.2. If You initiate litigation against any entity by asserting a patent 1336 | infringement claim (excluding declaratory judgment actions, 1337 | counter-claims, and cross-claims) alleging that a Contributor Version 1338 | directly or indirectly infringes any patent, then the rights granted to 1339 | You by any and all Contributors for the Covered Software under Section 1340 | 2.1 of this License shall terminate. 1341 | 1342 | 5.3. In the event of termination under Sections 5.1 or 5.2 above, all end user 1343 | license agreements (excluding distributors and resellers) which have been 1344 | validly granted by You or Your distributors under this License prior to 1345 | termination shall survive termination. 1346 | 1347 | 6. Disclaimer of Warranty 1348 | 1349 | Covered Software is provided under this License on an "as is" basis, 1350 | without warranty of any kind, either expressed, implied, or statutory, 1351 | including, without limitation, warranties that the Covered Software is free 1352 | of defects, merchantable, fit for a particular purpose or non-infringing. 1353 | The entire risk as to the quality and performance of the Covered Software 1354 | is with You. Should any Covered Software prove defective in any respect, 1355 | You (not any Contributor) assume the cost of any necessary servicing, 1356 | repair, or correction. This disclaimer of warranty constitutes an essential 1357 | part of this License. No use of any Covered Software is authorized under 1358 | this License except under this disclaimer. 1359 | 1360 | 7. Limitation of Liability 1361 | 1362 | Under no circumstances and under no legal theory, whether tort (including 1363 | negligence), contract, or otherwise, shall any Contributor, or anyone who 1364 | distributes Covered Software as permitted above, be liable to You for any 1365 | direct, indirect, special, incidental, or consequential damages of any 1366 | character including, without limitation, damages for lost profits, loss of 1367 | goodwill, work stoppage, computer failure or malfunction, or any and all 1368 | other commercial damages or losses, even if such party shall have been 1369 | informed of the possibility of such damages. This limitation of liability 1370 | shall not apply to liability for death or personal injury resulting from 1371 | such party's negligence to the extent applicable law prohibits such 1372 | limitation. Some jurisdictions do not allow the exclusion or limitation of 1373 | incidental or consequential damages, so this exclusion and limitation may 1374 | not apply to You. 1375 | 1376 | 8. Litigation 1377 | 1378 | Any litigation relating to this License may be brought only in the courts 1379 | of a jurisdiction where the defendant maintains its principal place of 1380 | business and such litigation shall be governed by laws of that 1381 | jurisdiction, without reference to its conflict-of-law provisions. Nothing 1382 | in this Section shall prevent a party's ability to bring cross-claims or 1383 | counter-claims. 1384 | 1385 | 9. Miscellaneous 1386 | 1387 | This License represents the complete agreement concerning the subject 1388 | matter hereof. If any provision of this License is held to be 1389 | unenforceable, such provision shall be reformed only to the extent 1390 | necessary to make it enforceable. Any law or regulation which provides that 1391 | the language of a contract shall be construed against the drafter shall not 1392 | be used to construe this License against a Contributor. 1393 | 1394 | 1395 | 10. Versions of the License 1396 | 1397 | 10.1. New Versions 1398 | 1399 | Mozilla Foundation is the license steward. Except as provided in Section 1400 | 10.3, no one other than the license steward has the right to modify or 1401 | publish new versions of this License. Each version will be given a 1402 | distinguishing version number. 1403 | 1404 | 10.2. Effect of New Versions 1405 | 1406 | You may distribute the Covered Software under the terms of the version 1407 | of the License under which You originally received the Covered Software, 1408 | or under the terms of any subsequent version published by the license 1409 | steward. 1410 | 1411 | 10.3. Modified Versions 1412 | 1413 | If you create software not governed by this License, and you want to 1414 | create a new license for such software, you may create and use a 1415 | modified version of this License if you rename the license and remove 1416 | any references to the name of the license steward (except to note that 1417 | such modified license differs from this License). 1418 | 1419 | 10.4. Distributing Source Code Form that is Incompatible With Secondary 1420 | Licenses If You choose to distribute Source Code Form that is 1421 | Incompatible With Secondary Licenses under the terms of this version of 1422 | the License, the notice described in Exhibit B of this License must be 1423 | attached. 1424 | 1425 | Exhibit A - Source Code Form License Notice 1426 | 1427 | This Source Code Form is subject to the 1428 | terms of the Mozilla Public License, v. 1429 | 2.0. If a copy of the MPL was not 1430 | distributed with this file, You can 1431 | obtain one at 1432 | http://mozilla.org/MPL/2.0/. 1433 | 1434 | If it is not possible or desirable to put the notice in a particular file, 1435 | then You may include the notice in a location (such as a LICENSE file in a 1436 | relevant directory) where a recipient would be likely to look for such a 1437 | notice. 1438 | 1439 | You may add additional accurate notices of copyright ownership. 1440 | 1441 | Exhibit B - "Incompatible With Secondary Licenses" Notice 1442 | 1443 | This Source Code Form is "Incompatible 1444 | With Secondary Licenses", as defined by 1445 | the Mozilla Public License, v. 2.0. 1446 | ``` 1447 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 |

sysbox

2 | 3 | *** 4 | 5 | **Sysbox-EE End-of-Life Announcement (01/2023)** 6 | 7 | Prior to the [acquisition by Docker][docker-acquisition] on 05/2022, Nestybox 8 | offered Sysbox Enterprise as an enhanced version of Sysbox (e.g., more security, 9 | more workloads, and official support), via a paid license agreement. 10 | 11 | After the acquisition however, Sysbox Enterprise will no longer be offered as a 12 | standalone product. Instead, Docker plans to port some (TBD) Sysbox-EE features 13 | to Sysbox-CE so users can replace the former with the latter. 14 | 15 | At this time, **no new licenses of Sysbox-EE are sold and no license renewals 16 | are offered**. This repo will remain open for existing customers as a way to 17 | download Sysbox-EE binaries, but will be phased out in mid 2023 (after all 18 | existing license agreements expire). 19 | 20 | *** 21 | 22 | ## Contents 23 | 24 | * [Introduction](#introduction) 25 | * [Features](#features) 26 | * [Supported Distros](#supported-distros) 27 | * [Host Requirements](#host-requirements) 28 | * [Installation](#installation) 29 | * [Using Sysbox-EE](#using-sysbox-ee) 30 | * [Documentation](#documentation) 31 | * [Filing Issues](#filing-issues) 32 | * [Support](#support) 33 | * [About Nestybox](#about-nestybox) 34 | * [Contact](#contact) 35 | * [Thank You](#thank-you) 36 | 37 | ## Introduction 38 | 39 | **Sysbox Enterprise Edition** (Sysbox-EE) is the enterprise version of the 40 | open-source [Sysbox container runtime](https://github.com/nestybox/sysbox), 41 | developed by Nestybox ([acquired by Docker][docker-acquisition] on 05/2022). 42 | 43 | Sysbox-EE uses Sysbox at its core, but adds enterprise-level features such as: 44 | 45 | * Improved container isolation / security 46 | 47 | * Running more types of system-level workloads inside containers 48 | 49 | * Scalability (running more containers per host) 50 | 51 | * Significant performance and efficiency optimizations (for faster container deployment with reduced disk utilization) 52 | 53 | * Lifecycle (higher release cadence, critical bug fixes ASAP) 54 | 55 | * Nestybox professional support with a guaranteed SLA (rather than best effort on Sysbox) 56 | 57 | * Feature prioritization (Sysbox-EE feature requests are prioritized) 58 | 59 | Sysbox-EE is a drop-in replacement for Sysbox. It installs and it's used in the 60 | exact same way, but includes the additional features listed above. On a given 61 | host however, either Sysbox or Sysbox-EE must be installed, never both. 62 | 63 | See the [next section](#features) for a comparison between Sysbox-EE and 64 | Sysbox (aka Sysbox Community Edition or Sysbox-CE). 65 | 66 | ## Features 67 | 68 | Features are shown below. 69 | 70 |

71 | sysbox 72 |

73 | 74 | If you have questions, you can reach us [here](#contact). 75 | 76 | ## Supported Distros 77 | 78 | Sysbox-EE relies on functionality available only in relatively recent Linux kernel 79 | releases. 80 | 81 | See the [distro compatibility doc](docs/distro-compat.md) for information about 82 | the supported Linux distributions and the required kernel releases. 83 | 84 | We plan to add support for more distros in the near future. 85 | 86 | ## Host Requirements 87 | 88 | The Sysbox-EE host must meet the following requirements: 89 | 90 | * It must be running one of the [supported Linux distros](docs/distro-compat.md). 91 | 92 | * We recommend a minimum of 4 CPUs (e.g., 2 cores with 2 hyperthreads) and 4GB 93 | of RAM. Though this is not a hard requirement, smaller configurations may 94 | slow down Sysbox-EE. 95 | 96 | ## Installation 97 | 98 | Sysbox-EE is a drop-in replacement for Sysbox, meaning that it's installed and 99 | used in the same way. 100 | 101 | For this reason, the documents in the [Sysbox repo](https://github.com/nestybox/sysbox/tree/master/docs) 102 | apply equally to both Sysbox and Sysbox-EE. 103 | 104 | Here are the links to the docs showing how to install Sysbox-EE: 105 | 106 | * [Installation on Docker hosts](https://github.com/nestybox/sysbox/blob/master/docs/user-guide/install-package.md#installing-sysbox-enterprise-edition-sysbox-ee) 107 | 108 | * [Installation on Kubernetes Clusters](https://github.com/nestybox/sysbox/blob/master/docs/user-guide/install-k8s.md#installation-of-sysbox-enterprise-edition-sysbox-ee) 109 | 110 | ## Using Sysbox-EE 111 | 112 | Once Sysbox-EE is installed, you create a container using your container manager 113 | or orchestrator (e.g., Docker or Kubernetes) and an image of your choice. 114 | 115 | Docker command example: 116 | 117 | ```console 118 | $ docker run --runtime=sysbox-runc --rm -it --hostname my_cont registry.nestybox.com/nestybox/ubuntu-bionic-systemd-docker 119 | root@my_cont:/# 120 | ``` 121 | 122 | Kubernetes pod spec example: 123 | 124 | ```yaml 125 | apiVersion: v1 126 | kind: Pod 127 | metadata: 128 | name: ubu-bio-systemd-docker 129 | annotations: 130 | io.kubernetes.cri-o.userns-mode: "auto:size=65536" 131 | spec: 132 | runtimeClassName: sysbox-runc 133 | containers: 134 | - name: ubu-bio-systemd-docker 135 | image: registry.nestybox.com/nestybox/ubuntu-bionic-systemd-docker 136 | command: ["/sbin/init"] 137 | restartPolicy: Never 138 | ``` 139 | 140 | You can choose whatever container image you want, Sysbox-EE places no requirements 141 | on the image. 142 | 143 | Refer to the [Documentation](#documentation) section below for further examples 144 | on how to use Sysbox-EE. 145 | 146 | ## Documentation 147 | 148 | The following documents in the [Sysbox repo](https://github.com/nestybox/sysbox/tree/master/docs) 149 | show how to use Docker and Kubernetes to deploy containers with Sysbox. 150 | 151 | These docs apply equally to both Sysbox and Sysbox-EE. 152 | 153 | Features that are specific to Sysbox-EE are tagged with **"Sysbox-EE Feature 154 | Highlight"** in the docs. 155 | 156 | * [Sysbox Quick Start Guide](https://github.com/nestybox/sysbox/blob/master/docs/quickstart/README.md) 157 | 158 | * Provides many examples for using Sysbox to deploy enhanced 159 | containers. New users should start here. 160 | 161 | * [Sysbox User Guide](https://github.com/nestybox/sysbox/blob/master/docs/user-guide/README.md) 162 | 163 | * Provides more detailed information on Sysbox features and troubleshooting. 164 | 165 | In addition, the [Nestybox blog site](https://blog.nestybox.com) has articles 166 | on how to use Sysbox to deploy containers. 167 | 168 | ## Filing Issues 169 | 170 | We apologize for any problems in the product or documentation, and we appreciate 171 | users filing issues that help us improve Sysbox-EE. 172 | 173 | To file issues with Sysbox-EE (e.g., bugs, feature requests, documentation changes, etc.), 174 | please refer to the [issue guidelines](docs/issue-guidelines.md) document. 175 | 176 | ## Security 177 | 178 | If you find bugs or issues that may expose a Sysbox-EE vulnerability, please report 179 | these by sending an email to security@nestybox.com. Please do not open security 180 | issues in this repo. Thanks! 181 | 182 | In addition, a few vulnerabilities have recently been found in the Linux kernel 183 | that in some cases reduce or negate the enhanced isolation provided by Sysbox 184 | containers. Fortunately they are all fixed in recent Linux kernels. See the 185 | Sysbox User Guide's [Vulnerabilities & CVEs chapter](https://github.com/nestybox/sysbox/tree/master/docs/user-guide/security-cve.md) 186 | for more info, and reach out on the [Sysbox Slack channel][slack] for further questions. 187 | 188 | ## Support 189 | 190 | Reach us at our [slack channel][slack] or at `contact@nestybox.com` for any questions. 191 | See our [contact info](#contact) below for more options. 192 | 193 | ## Contact 194 | 195 | We are happy to help. You can reach us at: 196 | 197 | Email: `contact@nestybox.com` 198 | 199 | Slack: [Nestybox Slack Workspace][slack] 200 | 201 | [slack]: https://join.slack.com/t/nestybox-support/shared_invite/enQtOTA0NDQwMTkzMjg2LTAxNGJjYTU2ZmJkYTZjNDMwNmM4Y2YxNzZiZGJlZDM4OTc1NGUzZDFiNTM4NzM1ZTA2NDE3NzQ1ODg1YzhmNDQ 202 | 203 | [docker-acquisition]: https://www.docker.com/blog/docker-advances-container-isolation-and-workloads-with-acquisition-of-nestybox/ 204 | 205 | [docker-desktop]: https://www.docker.com/products/ 206 | -------------------------------------------------------------------------------- /docs/README.md: -------------------------------------------------------------------------------- 1 | # Sysbox-EE Documentation 2 | 3 | Sysbox-EE is a drop-in replacement for Sysbox, meaning that it's installed and 4 | used in the same way. 5 | 6 | For this reason, the documents in the Sysbox repo apply equally to Sysbox-EE. 7 | 8 | Features that are specific to Sysbox-EE are tagged with **"Sysbox-EE Feature 9 | Highlight"**. 10 | 11 | Features that appear in a particular Sysbox release are flagged in the docs with 12 | the release tag (e.g., "**\[ v0.1.2+ ]**" indicates the feature appeared in 13 | Sysbox release v0.1.2 and beyond). 14 | 15 | ## Documents 16 | 17 | - [Sysbox Distro Compatibility doc](distro-compat.md) 18 | 19 | - Shows Linux distros supported by Sysbox and Sysbox-EE. 20 | 21 | - [Sysbox Quick Start Guide](quickstart/README.md) 22 | 23 | - Start here if new to Sysbox / Sysbox-EE; has lots of examples on how to use it. 24 | 25 | - [Sysbox User Guide](user-guide/README.md) 26 | 27 | - Provides detailed info and details on Sysbox's features and functionality. 28 | 29 | In addition to these docs, you can also find articles on practical uses of Sysbox 30 | in the [Nestybox blog site](https://blog.nestybox.com/). 31 | -------------------------------------------------------------------------------- /docs/distro-compat.md: -------------------------------------------------------------------------------- 1 | # Sysbox-EE Distro Compatibility 2 | 3 | ## Contents 4 | 5 | - [Supported Linux Distros](#supported-linux-distros) 6 | - [Kernel Upgrade Procedures](#kernel-upgrade-procedures) 7 | 8 | ## Supported Linux Distros 9 | 10 | The following table summarizes the supported Linux distros, the installation 11 | methods supported, and any other requirements: 12 | 13 | | Distro / Release | Package Install | K8s Install | Kernel Upgrade | Other | 14 | | --------------------- | :-------------: | :---------: | :----: | :----: | 15 | | Ubuntu Bionic (18.04) | ✓ | ✓ | [Maybe](#ubuntu-kernel-upgrade) | | 16 | | Ubuntu Focal (20.04) | ✓ | ✓ | No | | 17 | | Debian Buster (10) | ✓ | | [Yes](#debian-kernel-upgrade) | | 18 | | Debian Bullseye (11) | ✓ | | No | | 19 | | Flatcar | N/A | | No | More details [here](https://github.com/nestybox/sysbox-flatcar-preview) | 20 | 21 | **NOTES:** 22 | 23 | - "Package install" means a Sysbox-EE package is available for that distro. See [here](../README.md#installation) for more. 24 | 25 | - "K8s-install" means you can deploy Sysbox-EE on a Kubernetes worker node based on that distro. See [here](../README.md#installation) for more. 26 | 27 | - "Kernel upgrade" means a kernel upgrade may be required (Sysbox-EE requires a fairly recent kernel). See [below](#kernel-upgrade-procedures) for more. 28 | 29 | ## Kernel Upgrade Procedures 30 | 31 | ### Ubuntu Kernel Upgrade 32 | 33 | If you have a relatively old Ubuntu 18.04 release (e.g. 18.04.3), you need to upgrade the kernel to >= 5.0. 34 | 35 | We recommend using Ubuntu's [LTS-enablement](https://wiki.ubuntu.com/Kernel/LTSEnablementStack) package to do the upgrade as follows: 36 | 37 | ```console 38 | $ sudo apt-get update && sudo apt install --install-recommends linux-generic-hwe-18.04 -y 39 | 40 | $ sudo shutdown -r now 41 | ``` 42 | 43 | ### Debian Kernel Upgrade 44 | 45 | This one is only required when running Debian Buster. 46 | 47 | ```console 48 | $ # Allow debian-backports utilization ... 49 | 50 | $ echo deb http://deb.debian.org/debian buster-backports main contrib non-free | sudo tee /etc/apt/sources.list.d/buster-backports.list 51 | 52 | $ sudo apt update 53 | 54 | $ sudo apt install -t buster-backports linux-image-amd64 55 | 56 | $ sudo shutdown -r now 57 | ``` 58 | 59 | Refer to this [link](https://wiki.debian.org/HowToUpgradeKernel) for more details. 60 | -------------------------------------------------------------------------------- /docs/figures/dind.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nestybox/sysbox-ee/80f4af70955ad19ce4f76867a65f8ba4ad65957d/docs/figures/dind.png -------------------------------------------------------------------------------- /docs/figures/k8s-in-docker.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nestybox/sysbox-ee/80f4af70955ad19ce4f76867a65f8ba4ad65957d/docs/figures/k8s-in-docker.png -------------------------------------------------------------------------------- /docs/figures/kind-sysbox.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nestybox/sysbox-ee/80f4af70955ad19ce4f76867a65f8ba4ad65957d/docs/figures/kind-sysbox.png -------------------------------------------------------------------------------- /docs/figures/kindbox.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nestybox/sysbox-ee/80f4af70955ad19ce4f76867a65f8ba4ad65957d/docs/figures/kindbox.png -------------------------------------------------------------------------------- /docs/figures/sysbox-ee-header.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nestybox/sysbox-ee/80f4af70955ad19ce4f76867a65f8ba4ad65957d/docs/figures/sysbox-ee-header.png -------------------------------------------------------------------------------- /docs/figures/sysbox-features.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nestybox/sysbox-ee/80f4af70955ad19ce4f76867a65f8ba4ad65957d/docs/figures/sysbox-features.png -------------------------------------------------------------------------------- /docs/figures/sysbox.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/nestybox/sysbox-ee/80f4af70955ad19ce4f76867a65f8ba4ad65957d/docs/figures/sysbox.png -------------------------------------------------------------------------------- /docs/issue-guidelines.md: -------------------------------------------------------------------------------- 1 | # Guidelines for Filing Issues 2 | 3 | Issues can be filed [here](https://github.com/nestybox/sysbox-external/issues) 4 | 5 | Please follow these guidelines when filing issues with Sysbox-EE. 6 | 7 | 1) Create an issue with one of the following labels: 8 | 9 | - `Bug`: for functional defects, performance issues, etc. 10 | 11 | - `Documentation`: documentation errors or improvements 12 | 13 | - `Enhancement`: Feature requests 14 | 15 | - `Question`: for questions related to usage, design, etc. 16 | 17 | 2) Add a label corresponding to the Sysbox-EE release (e.g. `v0.3.0`) 18 | 19 | 3) Include information about the host's Linux (e.g., `lsb_release`, `uname -a`). 20 | 21 | 4) Describe the issue as clearly and completely as possible. 22 | 23 | 5) Tell us how to best reproduce it. 24 | 25 | We appreciate when our users report issues. Nestybox will try to 26 | address them ASAP. We will mark them as `fixed`, `invalid`, 27 | `duplicate`, or `wont-fix`. 28 | 29 | Thanks for helping us improve Sysbox-EE! 30 | -------------------------------------------------------------------------------- /scr/LICENSE.txt: -------------------------------------------------------------------------------- 1 | MIT License 2 | 3 | Copyright (c) 2020 Nestybox, Inc. 4 | 5 | Permission is hereby granted, free of charge, to any person obtaining a copy 6 | of this software and associated documentation files (the "Software"), to deal 7 | in the Software without restriction, including without limitation the rights 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell 9 | copies of the Software, and to permit persons to whom the Software is 10 | furnished to do so, subject to the following conditions: 11 | 12 | The above copyright notice and this permission notice shall be included in all 13 | copies or substantial portions of the Software. 14 | 15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR 16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE 18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER 19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, 20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 21 | SOFTWARE. 22 | -------------------------------------------------------------------------------- /scr/rm_all_syscont: -------------------------------------------------------------------------------- 1 | #!/bin/bash -e 2 | 3 | # 4 | # Sample script to stop and remove all system containers on the system (launched with Docker). 5 | # 6 | 7 | for container in `docker ps -aq`; do 8 | runtime=$(docker inspect --format='{{.HostConfig.Runtime}}' "$container") 9 | if [[ "$runtime" == "sysbox-runc" ]]; then 10 | echo "stopping system container $container" 11 | docker stop "$container" 12 | echo "removing system container $container" 13 | docker rm "$container" 14 | fi 15 | done 16 | --------------------------------------------------------------------------------