diff options
| author | flouthoc <flouthoc.git@gmail.com> | 2021-08-05 17:12:17 +0530 |
|---|---|---|
| committer | flouthoc <flouthoc.git@gmail.com> | 2021-08-06 15:04:47 +0530 |
| commit | 541e83ffe285cc67f4635d2dd1e7c89135140a13 (patch) | |
| tree | 3e36e1cbe94763c156bf84690de520219bd6daab /pkg | |
| parent | 1f0a24437d71f8fe2b2233a428202afcfe513666 (diff) | |
| download | podman-541e83ffe285cc67f4635d2dd1e7c89135140a13.tar.gz podman-541e83ffe285cc67f4635d2dd1e7c89135140a13.tar.bz2 podman-541e83ffe285cc67f4635d2dd1e7c89135140a13.zip | |
personality: Add support for setting execution domain.
Execution domains tell Linux how to map signal numbers into signal actions.
The execution domain system allows Linux to provide limited support for binaries
compiled under other UNIX-like operating systems.
Reference: https://man7.org/linux/man-pages/man2/personality.2.html
Signed-off-by: flouthoc <flouthoc.git@gmail.com>
Diffstat (limited to 'pkg')
| -rw-r--r-- | pkg/specgen/generate/oci.go | 3 | ||||
| -rw-r--r-- | pkg/specgen/specgen.go | 5 |
2 files changed, 8 insertions, 0 deletions
diff --git a/pkg/specgen/generate/oci.go b/pkg/specgen/generate/oci.go index 6e310d8a6..1f3f9e832 100644 --- a/pkg/specgen/generate/oci.go +++ b/pkg/specgen/generate/oci.go @@ -285,6 +285,9 @@ func SpecGenToOCI(ctx context.Context, s *specgen.SpecGenerator, rt *libpod.Runt } g.AddMount(cgroupMnt) } + + g.Config.Linux.Personality = s.Personality + g.SetProcessCwd(s.WorkDir) g.SetProcessArgs(finalCmd) diff --git a/pkg/specgen/specgen.go b/pkg/specgen/specgen.go index b4ac337b5..fc647227e 100644 --- a/pkg/specgen/specgen.go +++ b/pkg/specgen/specgen.go @@ -186,6 +186,11 @@ type ContainerBasicConfig struct { // InitContainerType describes if this container is an init container // and if so, what type: always or oneshot InitContainerType string `json:"init_container_type"` + // Personality allows users to configure different execution domains. + // Execution domains tell Linux how to map signal numbers into signal actions. + // The execution domain system allows Linux to provide limited support + // for binaries compiled under other UNIX-like operating systems. + Personality *spec.LinuxPersonality `json:"personality,omitempty"` } // ContainerStorageConfig contains information on the storage configuration of a |