diff --git a/docs/.drawio.svg b/docs/.drawio.svg index 7aa3c4cf7..c2fcf5cc9 100644 --- a/docs/.drawio.svg +++ b/docs/.drawio.svg @@ -1,4 +1,696 @@ - - - -Intermediate ProcessIntermediate Pr...youki createyouki createInit ProcessInit...youki startyouki startHigh-level runtimeHigh-level...youki create $idyouki create $idfork(2)fork(2)send identifier mapping requestsend identifier mapping requestunshare(CLONE_NEWUSER)unshare(CLONE_NEWUSER)write uid mappingwrite uid mappingwrite gid mappingwrite gid mappingsend mapping writtensend mapping writtenfork(2)fork(2)send readysend ready send ready with a init process pidsend ready with a init process...update the pid fileupdate the pid fileexitexitHigh-level runtimeHigh-level...youki start $idyouki start $idsend the start signalsend the start signalexitexitsetup cgroupsetup cgroupunshare(CLONE_NEWPID)unshare(CLONE_NEWPID)set uid and gidset uid and gidexitexitexec the container entry pointexec the container entry pointwait for the start signalwait for the start signalsetup capabilitysetup capabilitypivot_root(2)pivot_root(2)unshare(rest of NAMESPACE)unshare(rest of NAMESPACE)exitexitsetup seccompsetup seccompsend seccomp notify fdsend seccomp notify fdsend seccomp notify donesend seccomp notify done send seccomp notify through listenersend seccomp notify through listene...seccomp agentseccomp age...Viewer does not support full SVG 1.1 \ No newline at end of file + + + + + + + + + + + Intermediate Process + + + + + + Intermediate Pr... + + + + + + + + + + + + + youki create + + + + + + youki create + + + + + + + + + + + + Init + + Process + + + + + + + Init... + + + + + + + + + + + + + youki start + + + + + + youki start + + + + + + + + + + + + + High-level runtime + + + + + + High-level... + + + + + + + + + + + + youki create $id + + + + + + + youki create $id + + + + + + + + + + + + + + + fork(2) + + + + + + + + fork(2) + + + + + + + + + + + + + + send identifier mapping request + + + + + + + send identifier mapping request + + + + + + + + + + + unshare(CLONE_NEWUSER) + + + + + + unshare(CLONE_NEWUSER) + + + + + + + + + + + + + write uid mapping + + + + + + write uid mapping + + + + + + + + + + + write gid mapping + + + + + + write gid mapping + + + + + + + + + + + + + + send mapping written + + + + + + + send mapping written + + + + + + + + + + + + + + + fork(2) + + + + + + + + fork(2) + + + + + + + + + + + + + + send ready + + + + + + + + send ready + + + + + + + + + + + + send ready with a init process pid + + + + + + + send ready with a init process... + + + + + + + + + + + + + update the pid file + + + + + + update the pid file + + + + + + + + + + + exit + + + + + + exit + + + + + + + + + + + + + High-level runtime + + + + + + High-level... + + + + + + + + + + + + youki start $id + + + + + + + youki start $id + + + + + + + + + + + + + + send the start signal + + + + + + + send the start signal + + + + + + + + + + + exit + + + + + + exit + + + + + + + + + + + + + + setup cgroup + + + + + + setup cgroup + + + + + + + + + + + + unshare(CLONE_NEWPID) + + + + + + unshare(CLONE_NEWPID) + + + + + + + + + + + set uid and gid + + + + + + set uid and gid + + + + + + + + + + + + + exit + + + + + + exit + + + + + + + + + + + exec the container entry point + + + + + + exec the container entry point + + + + + + + + + + + wait for the start signal + + + + + + wait for the start signal + + + + + + + + + + + setup capability + + + + + + setup capability + + + + + + + + + + + pivot_root(2) + + + + + + pivot_root(2) + + + + + + + + + + + unshare(rest of NAMESPACE) + + + + + + unshare(rest of NAMESPACE) + + + + + + + + + + + exit + + + + + + exit + + + + + + + + + + + setup seccomp + + + + + + setup seccomp + + + + + + + + + + + + + + send seccomp notify fd + + + + + + + send seccomp notify fd + + + + + + + + + + + + + + send seccomp notify done + + + + + + + + send seccomp notify done + + + + + + + + + + + + + + send seccomp notify through listener + + + + + + + + send seccomp notify through listene... + + + + + + + + + + + seccomp agent + + + + + + seccomp age... + + + + + + + + + Viewer does not support full SVG 1.1 + + + + \ No newline at end of file