1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
// Copyright (c) Contributors to the Apptainer project, established as
// Apptainer a Series of LF Projects LLC.
// For website terms of use, trademark policy, privacy policy and other
// project policies see https://lfprojects.org/policies
// Copyright (c) 2018-2020, Sylabs Inc. All rights reserved.
// This software is licensed under a 3-clause BSD license. Please consult the
// LICENSE.md file distributed with the sources of this project regarding your
// rights to use or distribute this software.
package starter
import (
"net"
"os"
"github.com/apptainer/apptainer/internal/pkg/runtime/engine"
"github.com/apptainer/apptainer/pkg/sylog"
)
// RPCServer serves runtime engine requests.
//
// The RPC server process is already in correct namespaces
// required by container, so any operations performed will
// affect final container environment. When run with suid
// flow, i.e. no user namespace for container is created
// and no hybrid workflow is requested, the server is run
// with escalated privileges (as euid 0).
func RPCServer(socket int, e *engine.Engine) {
comm := os.NewFile(uintptr(socket), "unix")
conn, err := net.FileConn(comm)
if err != nil {
sylog.Fatalf("socket communication error: %s\n", err)
}
comm.Close()
engine.ServeRPCRequests(e, conn)
os.Exit(0)
}
|
