diff options
| author | Daniel J Walsh <dwalsh@redhat.com> | 2020-02-27 14:19:07 -0400 |
|---|---|---|
| committer | Daniel J Walsh <dwalsh@redhat.com> | 2020-03-02 16:37:32 -0500 |
| commit | b163640c61dcb10953949a1ee28599d8a19fd046 (patch) | |
| tree | e7b56307cc2778c6cab81f658515ea145d990979 /pkg/specgen/namespaces.go | |
| parent | 47c4ea39196cedac87e7a4e4c1ead54ed9d7ed50 (diff) | |
| download | podman-b163640c61dcb10953949a1ee28599d8a19fd046.tar.gz podman-b163640c61dcb10953949a1ee28599d8a19fd046.tar.bz2 podman-b163640c61dcb10953949a1ee28599d8a19fd046.zip | |
Allow devs to set labels in container images for default capabilities.
This patch allows users to specify the list of capabilities required
to run their container image.
Setting a image/container label "io.containers.capabilities=setuid,setgid"
tells podman that the contained image should work fine with just these two
capabilties, instead of running with the default capabilities, podman will
launch the container with just these capabilties.
If the user or image specified capabilities that are not in the default set,
the container will print an error message and will continue to run with the
default capabilities.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Diffstat (limited to 'pkg/specgen/namespaces.go')
| -rw-r--r-- | pkg/specgen/namespaces.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkg/specgen/namespaces.go b/pkg/specgen/namespaces.go index 17b180cde..79a83819a 100644 --- a/pkg/specgen/namespaces.go +++ b/pkg/specgen/namespaces.go @@ -3,9 +3,9 @@ package specgen import ( "os" + "github.com/containers/common/pkg/capabilities" "github.com/containers/libpod/libpod" "github.com/containers/libpod/libpod/image" - "github.com/containers/libpod/pkg/capabilities" "github.com/cri-o/ocicni/pkg/ocicni" spec "github.com/opencontainers/runtime-spec/specs-go" "github.com/opencontainers/runtime-tools/generate" |