diff options
| author | Giuseppe Scrivano <gscrivan@redhat.com> | 2020-08-04 23:01:55 +0200 |
|---|---|---|
| committer | Giuseppe Scrivano <gscrivan@redhat.com> | 2020-08-12 23:46:38 +0200 |
| commit | feff414ae1d4ca68b3341fa37c4abf8fc90a55f8 (patch) | |
| tree | 50a3c0f902c91196eaee30c6255bdf27b01598fa /pkg/spec | |
| parent | d777a7bd5c920ce3cf06c4eba25068747dbc6b8f (diff) | |
| download | podman-feff414ae1d4ca68b3341fa37c4abf8fc90a55f8.tar.gz podman-feff414ae1d4ca68b3341fa37c4abf8fc90a55f8.tar.bz2 podman-feff414ae1d4ca68b3341fa37c4abf8fc90a55f8.zip | |
run, create: add new security-opt proc-opts
it allows to customize the options passed down to the OCI runtime for
setting up the /proc mount.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Diffstat (limited to 'pkg/spec')
| -rw-r--r-- | pkg/spec/createconfig.go | 1 | ||||
| -rw-r--r-- | pkg/spec/security.go | 2 |
2 files changed, 3 insertions, 0 deletions
diff --git a/pkg/spec/createconfig.go b/pkg/spec/createconfig.go index 40f9bc029..c49d51fc5 100644 --- a/pkg/spec/createconfig.go +++ b/pkg/spec/createconfig.go @@ -125,6 +125,7 @@ type SecurityConfig struct { ReadOnlyRootfs bool //read-only ReadOnlyTmpfs bool //read-only-tmpfs Sysctl map[string]string //sysctl + ProcOpts []string } // CreateConfig is a pre OCI spec structure. It represents user input from varlink or the CLI diff --git a/pkg/spec/security.go b/pkg/spec/security.go index fc908b49d..e152e3495 100644 --- a/pkg/spec/security.go +++ b/pkg/spec/security.go @@ -76,6 +76,8 @@ func (c *SecurityConfig) SetSecurityOpts(runtime *libpod.Runtime, securityOpts [ } switch con[0] { + case "proc-opts": + c.ProcOpts = strings.Split(con[1], ",") case "label": c.LabelOpts = append(c.LabelOpts, con[1]) case "apparmor": |