package main import ( "fmt" "github.com/dotcloud/docker/pkg/libcontainer" "github.com/dotcloud/docker/pkg/libcontainer/network" "github.com/dotcloud/docker/pkg/system" "github.com/dotcloud/docker/pkg/term" "io" "log" "os" "os/exec" "syscall" ) func execCommand(container *libcontainer.Container) (pid int, err error) { master, console, err := createMasterAndConsole() if err != nil { return -1, err } // we need CLONE_VFORK so we can wait on the child flag := uintptr(getNamespaceFlags(container.Namespaces) | CLONE_VFORK) command := exec.Command("nsinit", console) command.SysProcAttr = &syscall.SysProcAttr{ Cloneflags: flag, } inPipe, err := command.StdinPipe() if err != nil { return -1, err } if err := command.Start(); err != nil { return -1, err } pid = command.Process.Pid if container.Network != nil { name1, name2, err := createVethPair() if err != nil { log.Fatal(err) } if err := network.SetInterfaceMaster(name1, container.Network.Bridge); err != nil { log.Fatal(err) } if err := network.InterfaceUp(name1); err != nil { log.Fatal(err) } if err := network.SetInterfaceInNamespacePid(name2, pid); err != nil { log.Fatal(err) } fmt.Fprint(inPipe, name2) inPipe.Close() } go func() { if _, err := io.Copy(os.Stdout, master); err != nil { log.Println(err) } }() go func() { if _, err := io.Copy(master, os.Stdin); err != nil { log.Println(err) } }() ws, err := term.GetWinsize(os.Stdin.Fd()) if err != nil { return -1, err } if err := term.SetWinsize(master.Fd(), ws); err != nil { return -1, err } state, err := term.SetRawTerminal(os.Stdin.Fd()) if err != nil { command.Process.Kill() return -1, err } defer term.RestoreTerminal(os.Stdin.Fd(), state) if err := command.Wait(); err != nil { return pid, err } return pid, nil } func createMasterAndConsole() (*os.File, string, error) { master, err := os.OpenFile("/dev/ptmx", syscall.O_RDWR|syscall.O_NOCTTY|syscall.O_CLOEXEC, 0) if err != nil { return nil, "", err } console, err := system.Ptsname(master) if err != nil { return nil, "", err } if err := system.Unlockpt(master); err != nil { return nil, "", err } return master, console, nil } func createVethPair() (name1 string, name2 string, err error) { name1, name2 = "veth001", "veth002" if err = network.CreateVethPair(name1, name2); err != nil { return } return }