mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-07-24 02:29:23 +00:00
cde33dcb06
When C/R-ing a net namespace with --empty-ns net option we should also skip netfilter rules too (as per https://github.com/docker/docker/issues/27597). However, there's one thing to be handled -- local TCP blocking rules are expected to be there on restore by restore_iptables() which is no longer the case, so put them back manually. Test included, checked on zdtm/static/socket-tcpbuf-local :) v2: Full scripts for empty netns setup. https://github.com/xemul/criu/issues/246 Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com>
8 lines
198 B
Bash
Executable file
8 lines
198 B
Bash
Executable file
#!/bin/sh
|
|
|
|
if [ "$CRTOOLS_SCRIPT_ACTION" == "setup-namespaces" ]; then
|
|
echo "Will up lo at $CRTOOLS_INIT_PID netns"
|
|
nsenter -t "$CRTOOLS_INIT_PID" --net ip link set up dev lo || exit 1
|
|
fi
|
|
|
|
exit 0
|