// +build !windows

 package runconfig // import "github.com/docker/docker/runconfig"

 
 import (

 	"fmt"
 	"runtime"

 	"github.com/docker/docker/api/types/container"

 	"github.com/docker/docker/pkg/sysinfo"

 )

 // DefaultDaemonNetworkMode returns the default network stack the daemon should
 // use.

 func DefaultDaemonNetworkMode() container.NetworkMode {
 	return container.NetworkMode("bridge")

 }
 

 // IsPreDefinedNetwork indicates if a network is predefined by the daemon
 func IsPreDefinedNetwork(network string) bool {

 	n := container.NetworkMode(network)

 	return n.IsBridge() || n.IsHost() || n.IsNone() || n.IsDefault()

 }
 

 // validateNetMode ensures that the various combinations of requested

 // network settings are valid.

 func validateNetMode(c *container.Config, hc *container.HostConfig) error {

 	// We may not be passed a host config, such as in the case of docker commit
 	if hc == nil {
 		return nil
 	}
 

 	err := validateNetContainerMode(c, hc)

 	if err != nil {
 		return err

 	}
 

 	if hc.UTSMode.IsHost() && c.Hostname != "" {
 		return ErrConflictUTSHostname
 	}
 

 	if hc.NetworkMode.IsHost() && len(hc.Links) > 0 {
 		return ErrConflictHostNetworkAndLinks
 	}
 
 	return nil
 }
 

 // validateIsolation performs platform specific validation of

 // isolation in the hostconfig structure. Linux only supports "default"

 // which is LXC container isolation

 func validateIsolation(hc *container.HostConfig) error {

 	// We may not be passed a host config, such as in the case of docker commit
 	if hc == nil {
 		return nil
 	}
 	if !hc.Isolation.IsValid() {

 		return fmt.Errorf("Invalid isolation: %q - %s only supports 'default'", hc.Isolation, runtime.GOOS)

 	}
 	return nil
 }

 // validateQoS performs platform specific validation of the QoS settings
 func validateQoS(hc *container.HostConfig) error {

 	// We may not be passed a host config, such as in the case of docker commit
 	if hc == nil {
 		return nil
 	}
 
 	if hc.IOMaximumBandwidth != 0 {

 		return fmt.Errorf("Invalid QoS settings: %s does not support configuration of maximum bandwidth", runtime.GOOS)

 	}
 
 	if hc.IOMaximumIOps != 0 {

 		return fmt.Errorf("Invalid QoS settings: %s does not support configuration of maximum IOPs", runtime.GOOS)

 	}
 	return nil
 }

 // validateResources performs platform specific validation of the resource settings

 // cpu-rt-runtime and cpu-rt-period can not be greater than their parent, cpu-rt-runtime requires sys_nice

 func validateResources(hc *container.HostConfig, si *sysinfo.SysInfo) error {

 	// We may not be passed a host config, such as in the case of docker commit
 	if hc == nil {
 		return nil
 	}
 
 	if hc.Resources.CPURealtimePeriod > 0 && !si.CPURealtimePeriod {

 		return fmt.Errorf("Your kernel does not support cgroup cpu real-time period")

 	}
 
 	if hc.Resources.CPURealtimeRuntime > 0 && !si.CPURealtimeRuntime {

 		return fmt.Errorf("Your kernel does not support cgroup cpu real-time runtime")

 	}
 
 	if hc.Resources.CPURealtimePeriod != 0 && hc.Resources.CPURealtimeRuntime != 0 && hc.Resources.CPURealtimeRuntime > hc.Resources.CPURealtimePeriod {

 		return fmt.Errorf("cpu real-time runtime cannot be higher than cpu real-time period")

 	}
 	return nil
 }

 
 // validatePrivileged performs platform specific validation of the Privileged setting
 func validatePrivileged(hc *container.HostConfig) error {
 	return nil
 }

 
 // validateReadonlyRootfs performs platform specific validation of the ReadonlyRootfs setting
 func validateReadonlyRootfs(hc *container.HostConfig) error {
 	return nil
 }