podman v2 remove bloat v2

rid ourseleves of libpod references in v2 client

Signed-off-by: Brent Baude <bbaude@redhat.com>

1 files changed, 0 insertions, 153 deletions

diff --git a/pkg/specgen/security.go b/pkg/specgen/security.go
deleted file mode 100644
index 6f835eae4..000000000
--- a/pkg/specgen/security.go
+++ /dev/null
@@ -1,153 +0,0 @@
-package specgen
-
-import (
-	"github.com/containers/libpod/libpod"
-	"github.com/opencontainers/selinux/go-selinux/label"
-	"github.com/pkg/errors"
-)
-
-// SetLabelOpts sets the label options of the SecurityConfig according to the
-// input.
-func (s *SpecGenerator) SetLabelOpts(runtime *libpod.Runtime, pidConfig Namespace, ipcConfig Namespace) error {
-	if !runtime.EnableLabeling() || s.Privileged {
-		s.SelinuxOpts = label.DisableSecOpt()
-		return nil
-	}
-
-	var labelOpts []string
-	if pidConfig.IsHost() {
-		labelOpts = append(labelOpts, label.DisableSecOpt()...)
-	} else if pidConfig.IsContainer() {
-		ctr, err := runtime.LookupContainer(pidConfig.Value)
-		if err != nil {
-			return errors.Wrapf(err, "container %q not found", pidConfig.Value)
-		}
-		secopts, err := label.DupSecOpt(ctr.ProcessLabel())
-		if err != nil {
-			return errors.Wrapf(err, "failed to duplicate label %q ", ctr.ProcessLabel())
-		}
-		labelOpts = append(labelOpts, secopts...)
-	}
-
-	if ipcConfig.IsHost() {
-		labelOpts = append(labelOpts, label.DisableSecOpt()...)
-	} else if ipcConfig.IsContainer() {
-		ctr, err := runtime.LookupContainer(ipcConfig.Value)
-		if err != nil {
-			return errors.Wrapf(err, "container %q not found", ipcConfig.Value)
-		}
-		secopts, err := label.DupSecOpt(ctr.ProcessLabel())
-		if err != nil {
-			return errors.Wrapf(err, "failed to duplicate label %q ", ctr.ProcessLabel())
-		}
-		labelOpts = append(labelOpts, secopts...)
-	}
-
-	s.SelinuxOpts = append(s.SelinuxOpts, labelOpts...)
-	return nil
-}
-
-// ConfigureGenerator configures the generator according to the input.
-/*
-func (c *SecurityConfig) ConfigureGenerator(g *generate.Generator, user *UserConfig) error {
-	// HANDLE CAPABILITIES
-	// NOTE: Must happen before SECCOMP
-	if c.Privileged {
-		g.SetupPrivileged(true)
-	}
-
-	useNotRoot := func(user string) bool {
-		if user == "" || user == "root" || user == "0" {
-			return false
-		}
-		return true
-	}
-
-	configSpec := g.Config
-	var err error
-	var defaultCaplist []string
-	bounding := configSpec.Process.Capabilities.Bounding
-	if useNotRoot(user.User) {
-		configSpec.Process.Capabilities.Bounding = defaultCaplist
-	}
-	defaultCaplist, err = capabilities.MergeCapabilities(configSpec.Process.Capabilities.Bounding, c.CapAdd, c.CapDrop)
-	if err != nil {
-		return err
-	}
-
-	privCapRequired := []string{}
-
-	if !c.Privileged && len(c.CapRequired) > 0 {
-		// Pass CapRequired in CapAdd field to normalize capabilities names
-		capRequired, err := capabilities.MergeCapabilities(nil, c.CapRequired, nil)
-		if err != nil {
-			logrus.Errorf("capabilities requested by user or image are not valid: %q", strings.Join(c.CapRequired, ","))
-		} else {
-			// Verify all capRequiered are in the defaultCapList
-			for _, cap := range capRequired {
-				if !util.StringInSlice(cap, defaultCaplist) {
-					privCapRequired = append(privCapRequired, cap)
-				}
-			}
-		}
-		if len(privCapRequired) == 0 {
-			defaultCaplist = capRequired
-		} else {
-			logrus.Errorf("capabilities requested by user or image are not allowed by default: %q", strings.Join(privCapRequired, ","))
-		}
-	}
-	configSpec.Process.Capabilities.Bounding = defaultCaplist
-	configSpec.Process.Capabilities.Permitted = defaultCaplist
-	configSpec.Process.Capabilities.Inheritable = defaultCaplist
-	configSpec.Process.Capabilities.Effective = defaultCaplist
-	configSpec.Process.Capabilities.Ambient = defaultCaplist
-	if useNotRoot(user.User) {
-		defaultCaplist, err = capabilities.MergeCapabilities(bounding, c.CapAdd, c.CapDrop)
-		if err != nil {
-			return err
-		}
-	}
-	configSpec.Process.Capabilities.Bounding = defaultCaplist
-
-	// HANDLE SECCOMP
-	if c.SeccompProfilePath != "unconfined" {
-		seccompConfig, err := getSeccompConfig(c, configSpec)
-		if err != nil {
-			return err
-		}
-		configSpec.Linux.Seccomp = seccompConfig
-	}
-
-	// Clear default Seccomp profile from Generator for privileged containers
-	if c.SeccompProfilePath == "unconfined" || c.Privileged {
-		configSpec.Linux.Seccomp = nil
-	}
-
-	for _, opt := range c.SecurityOpts {
-		// Split on both : and =
-		splitOpt := strings.Split(opt, "=")
-		if len(splitOpt) == 1 {
-			splitOpt = strings.Split(opt, ":")
-		}
-		if len(splitOpt) < 2 {
-			continue
-		}
-		switch splitOpt[0] {
-		case "label":
-			configSpec.Annotations[libpod.InspectAnnotationLabel] = splitOpt[1]
-		case "seccomp":
-			configSpec.Annotations[libpod.InspectAnnotationSeccomp] = splitOpt[1]
-		case "apparmor":
-			configSpec.Annotations[libpod.InspectAnnotationApparmor] = splitOpt[1]
-		}
-	}
-
-	g.SetRootReadonly(c.ReadOnlyRootfs)
-	for sysctlKey, sysctlVal := range c.Sysctl {
-		g.AddLinuxSysctl(sysctlKey, sysctlVal)
-	}
-
-	return nil
-}
-
-*/