30 Commits

Author SHA1 Message Date
b9e978c180 Synchronize CNI secure bridge documentation
with production use.
2024-05-07 14:57:57 +02:00
511b873e16 Configure Systemd Socket Activation
as new way for Poseidon to accept connections. This should reduce our issues caused by deployments.
2024-01-15 16:05:35 +00:00
840bfed1b9 Update docs/nomad_usage.md
Co-authored-by: Sebastian Serth <MrSerth@users.noreply.github.com>
2023-01-07 01:00:29 +01:00
9e0d3f2112 Document the container updater mechanism. 2023-01-07 01:00:29 +01:00
8950ab3776 Add single quotes for inner command.
Change to bash as interpreter.
Forbid single quotes for user commands.
2022-11-04 15:15:43 +01:00
b30223bf58 Specify requirements for Docker images
Closes #3 [ci skip]
2022-10-04 15:27:49 +02:00
1a5a49d7c8 Explicitly switch user for code execution.
Co-authored-by: Maximilian Pass <maximilian.pass@student.hpi.uni-potsdam.de>
2022-09-24 23:09:23 +02:00
d372e37d1a Add cni/secure-bridge to isolate host network 2022-09-18 19:02:04 +02:00
1df9701a74 Update example config with lowercase keys 2022-09-18 18:42:00 +02:00
3154c03f8a Recommend using gVisor as a sandbox 2022-09-07 22:19:20 +02:00
c0a617a383 Improve documentation of request URLs 2022-07-08 10:12:59 +02:00
689493047d Memory oversubscription documentation 2022-06-07 15:47:29 +02:00
a41659eed4 Enable memory oversubscription (#102)
* Enable memory oversubscription

* Fix and add e2e test
2022-03-18 08:31:27 +01:00
3abfdb6cc6 Improve documentation for Network support in Nomad 2021-12-22 15:58:15 +01:00
825ebdd3e6 Add forcePull option
* Add forcePull option
for pulling the image when the execution environment gets updated

* Apply suggestions from code review

Co-authored-by: Sebastian Serth <MrSerth@users.noreply.github.com>

* Add unit tests

* Clean up and implement option two

Co-authored-by: Sebastian Serth <MrSerth@users.noreply.github.com>
2021-12-09 14:54:14 +01:00
d5722a20c7 Add instructions on setting up Nomad for Poseidon 2021-10-21 11:24:25 +02:00
71cf21abce Configure an ansible playbook (#5)
* Configure an ansible playbook
to copy all required configurations to a Poseidon host.

* Copy also all TLS certificates if configured

* Exclude playbook in its own repository

* Adjust security.md to our current recommendations

* Add certificate generation and deployment

* Move access policy example file to the resources folder
2021-10-12 11:06:59 +02:00
791f997846 Fix broken link in docs/nomad_usage.md 2021-10-11 20:28:34 +02:00
9d7e59df36 Change authorization header key (#6)
* Change authorization header key

as the use of headers starting with X- has been deprecated in RFC6648.

* Update configuration.example.yaml

Co-authored-by: Sebastian Serth <MrSerth@users.noreply.github.com>
2021-10-04 12:23:41 +02:00
3b6c616d9c Describe purpose of Poseidon 2021-07-29 15:03:41 +00:00
a1366a9f76 Split README documentation into multiple files inside the docs folder 2021-07-29 15:03:41 +00:00
de6edeedcc Add docs on how to avoid Nomad rate limiting
Without this configuration, Nomad caps the maximum concurrent connections
of a unique client to 100. This is not sufficient for our use case.
2021-07-29 14:07:22 +00:00
12da813081 Describe how Poseidon abstracts from Nomad 2021-07-29 11:32:52 +00:00
f323bdf169 Add documentation on authenticating against Nomad 2021-07-27 11:35:55 +00:00
8b26ecbe5f Restructure project
We previously didn't really had any structure in our project apart
from creating a new folder for each package in our project root.
Now that we have accumulated some packages, we use the well-known
Golang project layout in order to clearly communicate our intent
with packages. See https://github.com/golang-standards/project-layout
2021-07-21 12:55:35 +02:00
64764a9809 Return mapped ports when requesting runners
We now store the mapped ports returned by Nomad locally in our runner
struct and return them when requesting the runner. The returned ip
address is in most Nomad setups not reachable from external users.
2021-07-20 23:22:58 +02:00
02b3f52a11 Add ability to copy files to and delete files from runner 2021-06-02 14:54:54 +02:00
a48804bd19 Add websocket schema for tunneling connections to the runner 2021-05-26 08:18:22 +02:00
fd89139a33 Specify missing response codes in API definition 2021-05-20 11:52:49 +02:00
a23ed540ef Add API definition 2021-04-30 07:14:02 +00:00