aboutsummaryrefslogtreecommitdiff
path: root/libpod/oci_conmon_linux.go
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2021-07-28 14:48:28 +0200
committerGitHub <noreply@github.com>2021-07-28 14:48:28 +0200
commit6c5966cf3cbfa15602ba2d9ef57284f2669a321d (patch)
tree452db7496ba00a2e0da6ff4fce77b27a93fa7c12 /libpod/oci_conmon_linux.go
parenta5de8314188d7376f645d8ac6c6f7a6f685b6a45 (diff)
parent60b9e8c0da683d253f3828f00442fc5a75540368 (diff)
downloadpodman-6c5966cf3cbfa15602ba2d9ef57284f2669a321d.tar.gz
podman-6c5966cf3cbfa15602ba2d9ef57284f2669a321d.tar.bz2
podman-6c5966cf3cbfa15602ba2d9ef57284f2669a321d.zip
Merge pull request #10910 from adrianreber/2021-07-12-checkpoint-restore-into-pod
Add support for checkpoint/restore into and out of pods
Diffstat (limited to 'libpod/oci_conmon_linux.go')
-rw-r--r--libpod/oci_conmon_linux.go24
1 files changed, 24 insertions, 0 deletions
diff --git a/libpod/oci_conmon_linux.go b/libpod/oci_conmon_linux.go
index 2914bd1a1..846d3815a 100644
--- a/libpod/oci_conmon_linux.go
+++ b/libpod/oci_conmon_linux.go
@@ -1064,6 +1064,30 @@ func (r *ConmonOCIRuntime) createOCIContainer(ctr *Container, restoreOptions *Co
if restoreOptions.TCPEstablished {
args = append(args, "--runtime-opt", "--tcp-established")
}
+ if restoreOptions.Pod != "" {
+ mountLabel := ctr.config.MountLabel
+ processLabel := ctr.config.ProcessLabel
+ if mountLabel != "" {
+ args = append(
+ args,
+ "--runtime-opt",
+ fmt.Sprintf(
+ "--lsm-mount-context=%s",
+ mountLabel,
+ ),
+ )
+ }
+ if processLabel != "" {
+ args = append(
+ args,
+ "--runtime-opt",
+ fmt.Sprintf(
+ "--lsm-profile=selinux:%s",
+ processLabel,
+ ),
+ )
+ }
+ }
}
logrus.WithFields(logrus.Fields{