Rework container management

* based on liblxc now
* container is managed by a management process which needs to run as
  root. LXC will take care of strict confinement of this container.
  We still don't allow any direct hardware access.
* `anbox shell` command is gone. Same functionality can be archive
  with the lxc-attach command.
This commit is contained in:
Simon Fels 2016-08-14 15:48:21 +02:00
commit 2b25f6f5bb
44 changed files with 1116 additions and 503 deletions

View file

@ -57,5 +57,9 @@ prepare_filesystem &
echo "Waiting for filesystem being prepared ..."
wait $!
ln -sf /dev/sockets/qemu_pipe /dev/qemu_pipe
ln -sf /dev/sockets/qemud /dev/qemud
ln -sf /dev/sockets/anbox_bridge /dev/anbox_bridge
echo "Starting real init now ..."
/init