gvisor.dev/gvisor@v0.0.0-20240520182842-f9d4d51c7e0f/pkg/sentry/kernel/task_net.go (about) 1 // Copyright 2018 The gVisor Authors. 2 // 3 // Licensed under the Apache License, Version 2.0 (the "License"); 4 // you may not use this file except in compliance with the License. 5 // You may obtain a copy of the License at 6 // 7 // http://www.apache.org/licenses/LICENSE-2.0 8 // 9 // Unless required by applicable law or agreed to in writing, software 10 // distributed under the License is distributed on an "AS IS" BASIS, 11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 // See the License for the specific language governing permissions and 13 // limitations under the License. 14 15 package kernel 16 17 import ( 18 "gvisor.dev/gvisor/pkg/sentry/inet" 19 ) 20 21 // IsNetworkNamespaced returns true if t is in a non-root network namespace. 22 func (t *Task) IsNetworkNamespaced() bool { 23 return !t.netns.IsRoot() 24 } 25 26 // NetworkContext returns the network stack used by the task. NetworkContext 27 // may return nil if no network stack is available. 28 // 29 // TODO(gvisor.dev/issue/1833): Migrate callers of this method to 30 // NetworkNamespace(). 31 func (t *Task) NetworkContext() inet.Stack { 32 return t.netns.Stack() 33 } 34 35 // NetworkNamespace returns the network namespace observed by the task. 36 func (t *Task) NetworkNamespace() *inet.Namespace { 37 return t.netns 38 } 39 40 // GetNetworkNamespace takes a reference on the task network namespace and 41 // returns it. It can return nil if the task isn't alive. 42 func (t *Task) GetNetworkNamespace() *inet.Namespace { 43 // t.mu is required to be sure that the network namespace will not be 44 // released. 45 t.mu.Lock() 46 netns := t.netns 47 if netns != nil { 48 netns.IncRef() 49 } 50 t.mu.Unlock() 51 return netns 52 }