Signed-off-by: Jess Frazelle <jess@mesosphere.com>
This commit is contained in:
Jess Frazelle 2016-04-16 16:06:20 -07:00
parent b92f1bdae4
commit 6e8773aaa3

View file

@ -3,7 +3,8 @@
Create fully static, including rootfs embedded, binaries that pop you directly Create fully static, including rootfs embedded, binaries that pop you directly
into a container. **Can be run by an unprivileged user.** into a container. **Can be run by an unprivileged user.**
This is based off a crazy idea from [@crosbymichael](https://github.com/crosbymichael) who first embedded an image in a binary :D This is based off a crazy idea from [@crosbymichael](https://github.com/crosbymichael)
who first embedded an image in a binary :D
**NOTE** **NOTE**
@ -11,6 +12,12 @@ You may have noticed you can't file an issue. That's because this is using a cra
person's (aka my) fork of libcontainer and until I get the patches into upstream person's (aka my) fork of libcontainer and until I get the patches into upstream
there's no way in hell I'm fielding issues from whoever is crazy enough to try this. there's no way in hell I'm fielding issues from whoever is crazy enough to try this.
**Nginx running with my user "jessie".**
![nginx.png](nginx.png)
### Building ### Building
This uses the new Golang vendoring so you need go 1.6 or This uses the new Golang vendoring so you need go 1.6 or
@ -106,12 +113,6 @@ The binary spawned does NOT need to oversee the container process if you
run in detached mode with a PID file. You can have it watched by the user mode run in detached mode with a PID file. You can have it watched by the user mode
systemd so that this binary is really just the launcher :) systemd so that this binary is really just the launcher :)
## Example
Nginx running with my user "jessie".
![nginx.png](nginx.png)
## Caveats ## Caveats
**Caps the binary needs to unpack and set **Caps the binary needs to unpack and set