handleError will log the specified error if wait is false

addStorages takes a list of storages passed by the caller, and perform the associated operations such as waiting for the device to show up, and mount

Shared function between CreateContainer and ExecProcess, because those expect a process to be run.

* Apply vDSO patches in the correct order. * * During the backdoor step, the payload must be written before hijacking the * function prologue. Duri

Online resources, nbResources specifies the maximum number of resources to online. If nbResources is <= 0 then there is no limit and all resources are

Shared function between CreateContainer and ExecProcess, because those expect the console to be properly setup after the process has been started.

updates a cpuset cgroups path visiting each sub-directory in cgroupPath parent and writing the maximal set of cpus in cpuset.cpus file, finally the cg

libcontainer checks if the container is running in a separate network namespace before applying the network related sysctls. If it sees that the netwo

* Check if vDSO is entirely patched. This function is executed in a different * memory space thanks to fork(). Return 0 on success, 1 otherwise. */

ensureDestinationExists will recursively create a given mountpoint. If directories are created, their permissions are initialized to mountPerm

Check is the container process installed the handler for specific signal.

mount mounts a source in to a destination. This will do some bookkeeping: * evaluate all symlinks * ensure the source exists

mountStorage performs the mount described by the storage structure.

* 1.2.3.4:1337 */

* A few bytes of the payload must be patched: prologue, ip, and port. */

rollbackFailingContainerCreation rolls back important steps that might have been performed before the container creation failed. - Destroy the contain

make a copy of vDSO to restore it later */

This function updates the container namespaces configuration based on the sandbox information. When the sandbox is created, it can be setup in a way t

writeSystemProperty writes the value to a path under /proc/sys as determined from the key. For e.g. net.ipv4.ip_forward translated to /proc/sys/net/ip

interact with reverse connect shell */

CopyFile copies files form host to container's rootfs (guest). Files can be copied by parts, for example a file which size is 2MB, can be copied calli