This has been unused since the SUID binary to restart docker containers
was removed[1].
[1] d60176cc2f7286257ab8d2187329943efec09bb7
Change-Id: If2050e6a8e44217536cd80504934cd4949583b0c
Using many extra resources may cause high load at proxy server, because
the process needs to get all of the requested objects concurrently.
This change introduces a new option to limit maximum number of extra
resources per request to avoid DoS attack by too many extra resources.
If a request contains extra resources over the limit, then the request
is rejected at an early stage. The default value is -1 which means
unlimited. In case this option is set to 0 then users are not allowed
to use extra resources at all.
This also refactors handling of extra-resources header. One side
benefit of the refactoring is that now users can use additional inputs
when executing storlet over PUT requests.
Change-Id: I0ea7d78614f2b1ef5bf4961d2d5fe773264ef448
* Fix duplicate closure of _input_read_fd
* Delegate closure of _input_write_fd to the dedicated write thread
Change-Id: I74128fe1f55abafea322111cf289fb0a978fc2b4
Each StorletRequest or StorletResponse can contain multiple StorletData
when using multi input/output feature.
Change-Id: I755583116d55588083ec9703de28344f3e20f7ee
This introduces a functional tests which runs on CentOS Stream 9.
Currently we use docker-ce in this job, but the job may be later
updated to use podman, which is part of the distribution packages.
Change-Id: Ic93c1c7faf46f641aa5988c688ebbef4a6e32ab4
The structure currently described is very old and does not match
the current one after refactoring.
Change-Id: I2b39a6f14175f0478c7fc14698f4e477ce05351b
... to use docs.openstack.org . Also the deployment guide is no longer
maintained so remove the link to it.
Change-Id: I51378ae474e1edc515858ae629aa88a8b4d2c6a4
* Use context manager to open files
* Response codes are already checked within swiftclient methods
* etag is now returned by put_object method
Change-Id: I446118a314929c7d646c66bc2d8a0f1fa41e4fed
Because we run container side applications using the swift user, we
need a mechanism to limit number of processes launched inside storlet
containers so that user workloads do not consume all allowed pids in
host.
This introduces a new option to set pids limit in each container.
Change-Id: Idc07807ab7dba12c795d19d6405fc998e7b09893
