diff --git a/docs/.drawio.svg b/docs/.drawio.svg index 7aa3c4cf7..c2fcf5cc9 100644 --- a/docs/.drawio.svg +++ b/docs/.drawio.svg @@ -1,4 +1,696 @@ - - - -
Intermediate Process
Intermediate Pr...
youki create
youki create
Init
Process
Init...
youki start
youki start
High-level runtime
High-level...
youki create $id
youki create $id
fork(2)
fork(2)
send identifier mapping request
send identifier mapping request
unshare(CLONE_NEWUSER)
unshare(CLONE_NEWUSER)
write uid mapping
write uid mapping
write gid mapping
write gid mapping
send mapping written
send mapping written
fork(2)
fork(2)
send ready
send ready
send ready with a init process pid
send ready with a init process...
update the pid file
update the pid file
exit
exit
High-level runtime
High-level...
youki start $id
youki start $id
send the start signal
send the start signal
exit
exit
setup cgroup
setup cgroup
unshare(CLONE_NEWPID)
unshare(CLONE_NEWPID)
set uid and gid
set uid and gid
exit
exit
exec the container entry point
exec the container entry point
wait for the start signal
wait for the start signal
setup capability
setup capability
pivot_root(2)
pivot_root(2)
unshare(rest of NAMESPACE)
unshare(rest of NAMESPACE)
exit
exit
setup seccomp
setup seccomp
send seccomp notify fd
send seccomp notify fd
send seccomp notify done
send seccomp notify done
send seccomp notify through listener
send seccomp notify through listene...
seccomp agent
seccomp age...
Viewer does not support full SVG 1.1
\ No newline at end of file + + + + + + + +
+
+
+ Intermediate Process +
+
+
+
+ + Intermediate Pr... + +
+
+ + + + + + +
+
+
+ youki create +
+
+
+
+ + youki create + +
+
+ + + + +
+
+
+ + Init +
+ Process +
+
+
+
+
+ + Init... + +
+
+ + + + + + +
+
+
+ youki start +
+
+
+
+ + youki start + +
+
+ + + + + + +
+
+
+ High-level runtime +
+
+
+
+ + High-level... + +
+
+ + + + +
+
+
+ + youki create $id + +
+
+
+
+ + youki create $id + +
+
+ + + + + + +
+
+
+ + + fork(2) + + +
+
+
+
+ + fork(2) + +
+
+ + + + + + +
+
+
+ + send identifier mapping request + +
+
+
+
+ + send identifier mapping request + +
+
+ + + + +
+
+
+ unshare(CLONE_NEWUSER) +
+
+
+
+ + unshare(CLONE_NEWUSER) + +
+
+ + + + + + +
+
+
+ write uid mapping +
+
+
+
+ + write uid mapping + +
+
+ + + + +
+
+
+ write gid mapping +
+
+
+
+ + write gid mapping + +
+
+ + + + + + +
+
+
+ + send mapping written + +
+
+
+
+ + send mapping written + +
+
+ + + + + + +
+
+
+ + + fork(2) + + +
+
+
+
+ + fork(2) + +
+
+ + + + + + +
+
+
+ + send ready +
+
+
+
+
+
+ + send ready + +
+
+ + + + +
+
+
+ + send ready with a init process pid + +
+
+
+
+ + send ready with a init process... + +
+
+ + + + + + +
+
+
+ update the pid file +
+
+
+
+ + update the pid file + +
+
+ + + + +
+
+
+ exit +
+
+
+
+ + exit + +
+
+ + + + + + +
+
+
+ High-level runtime +
+
+
+
+ + High-level... + +
+
+ + + + +
+
+
+ + youki start $id + +
+
+
+
+ + youki start $id + +
+
+ + + + + + +
+
+
+ + send the start signal + +
+
+
+
+ + send the start signal + +
+
+ + + + +
+
+
+ exit +
+
+
+
+ + exit + +
+
+ + + + + + + +
+
+
+ setup cgroup +
+
+
+
+ + setup cgroup + +
+
+ + + + + +
+
+
+ unshare(CLONE_NEWPID) +
+
+
+
+ + unshare(CLONE_NEWPID) + +
+
+ + + + +
+
+
+ set uid and gid +
+
+
+
+ + set uid and gid + +
+
+ + + + + + +
+
+
+ exit +
+
+
+
+ + exit + +
+
+ + + + +
+
+
+ exec the container entry point +
+
+
+
+ + exec the container entry point + +
+
+ + + + +
+
+
+ wait for the start signal +
+
+
+
+ + wait for the start signal + +
+
+ + + + +
+
+
+ setup capability +
+
+
+
+ + setup capability + +
+
+ + + + +
+
+
+ pivot_root(2) +
+
+
+
+ + pivot_root(2) + +
+
+ + + + +
+
+
+ unshare(rest of NAMESPACE) +
+
+
+
+ + unshare(rest of NAMESPACE) + +
+
+ + + + +
+
+
+ exit +
+
+
+
+ + exit + +
+
+ + + + +
+
+
+ setup seccomp +
+
+
+
+ + setup seccomp + +
+
+ + + + + + +
+
+
+ + send seccomp notify fd + +
+
+
+
+ + send seccomp notify fd + +
+
+ + + + + + +
+
+
+ + send seccomp notify done +
+
+
+
+
+
+ + send seccomp notify done + +
+
+ + + + + + +
+
+
+ + send seccomp notify through listener +
+
+
+
+
+
+ + send seccomp notify through listene... + +
+
+ + + + +
+
+
+ seccomp agent +
+
+
+
+ + seccomp age... + +
+
+
+ + + + + Viewer does not support full SVG 1.1 + + + +
\ No newline at end of file