blob: 394e5b574de51ee09735913297506c15cab7e408 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
#!/bin/sh
# PROVIDE: docker
# REQUIRE: DAEMON
# KEYWORD: nojail shutdown
. /etc/rc.subr
name="docker"
rcvar="docker_enable"
stop_cmd="docker_stop"
start_cmd="docker_start"
command="%%PREFIX%%/bin/docker"
load_rc_config $name
: ${docker_enable=NO}
: ${docker_dir=/usr/docker}
: ${docker_nat_pf=YES}
: ${docker_nat_iface=NONE}
docker_start()
{
if [ ! -d "${docker_dir}" ] ; then
echo "Missing ${docker_dir}! Please create / mount a ZFS dataset at this location."
exit 1
fi
if [ -e "/var/run/docker.pid" ] ; then
pgrep -F /var/run/docker.pid 2>/dev/null >/dev/null
if [ $? -eq 0 ] ; then
echo "Docker already running? /var/run/docker.pid"
exit 1
fi
fi
echo "Starting docker..."
daemon -p /var/run/docker.pid ${command} -d -e jail -s zfs -g ${docker_dir} -D >/var/log/docker.log 2>/var/log/docker.log
# Check for linux 64bit support and enable
kldstat | grep -q 'linux64'
if [ $? -ne 0 -a -e "/boot/kernel/linux64.ko" ] ; then
kldload linux64
fi
# Check for NAT support via PF
# This is an ugly experimental hack for now, eventually will go away
if [ "${docker_nat_pf}" != "YES" ] ; then return ; fi
# Load PF if not already
kldstat | grep -q 'pf.ko'
if [ $? -ne 0 -a -e "/boot/kernel/pf.ko" ] ; then
kldload pf
fi
# Check if PF rules already loaded
/sbin/pfctl -s nat 2>/dev/null | grep -q 172.17
if [ $? -eq 0 ] ; then return ; fi
if [ "${docker_nat_iface}" != "NONE" ] ; then
iface="${docker_nat_iface}"
else
iface=`/usr/bin/netstat -f inet -nrW | grep '^default' | awk '{ print $6 }'`
fi
echo "nat on ${iface} from 172.17.0.0/16 to any -> (${iface})" > /tmp/pf-nat-docker.$$
/sbin/pfctl -f /tmp/pf-nat-docker.$$ 2>/dev/null
/sbin/pfctl -e 2>/dev/null
rm /tmp/pf-nat-docker.$$
}
docker_stop()
{
if [ -e "/var/run/docker.pid" ] ; then
echo "Stopping docker..."
pkill -F /var/run/docker.pid
fi
}
run_rc_command "$1"
|
