mirror of
https://github.com/GoogleContainerTools/kaniko
synced 2026-10-20 09:57:14 +02:00
Updated vendor for exported BuildArgs
This commit is contained in:
+40
@@ -0,0 +1,40 @@
|
||||
package libnetwork
|
||||
|
||||
import (
|
||||
"github.com/docker/libnetwork/iptables"
|
||||
"github.com/sirupsen/logrus"
|
||||
)
|
||||
|
||||
const userChain = "DOCKER-USER"
|
||||
|
||||
func (c *controller) arrangeUserFilterRule() {
|
||||
c.Lock()
|
||||
arrangeUserFilterRule()
|
||||
c.Unlock()
|
||||
iptables.OnReloaded(func() {
|
||||
c.Lock()
|
||||
arrangeUserFilterRule()
|
||||
c.Unlock()
|
||||
})
|
||||
}
|
||||
|
||||
// This chain allow users to configure firewall policies in a way that persists
|
||||
// docker operations/restarts. Docker will not delete or modify any pre-existing
|
||||
// rules from the DOCKER-USER filter chain.
|
||||
func arrangeUserFilterRule() {
|
||||
_, err := iptables.NewChain(userChain, iptables.Filter, false)
|
||||
if err != nil {
|
||||
logrus.Warnf("Failed to create %s chain: %v", userChain, err)
|
||||
return
|
||||
}
|
||||
|
||||
if err = iptables.AddReturnRule(userChain); err != nil {
|
||||
logrus.Warnf("Failed to add the RETURN rule for %s: %v", userChain, err)
|
||||
return
|
||||
}
|
||||
|
||||
err = iptables.EnsureJumpRule("FORWARD", userChain)
|
||||
if err != nil {
|
||||
logrus.Warnf("Failed to ensure the jump rule for %s: %v", userChain, err)
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user