diff options
| -rw-r--r-- | cmd/kpod/spec.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/cmd/kpod/spec.go b/cmd/kpod/spec.go index 5033e9d09..69e81d0e5 100644 --- a/cmd/kpod/spec.go +++ b/cmd/kpod/spec.go @@ -55,6 +55,7 @@ func setupCapabilities(config *createConfig, configSpec *spec.Spec) error { // Parses information needed to create a container into an OCI runtime spec func createConfigToOCISpec(config *createConfig) (*spec.Spec, error) { g := generate.New() + g.AddCgroupsMount("ro") g.SetProcessCwd(config.workDir) g.SetProcessArgs(config.command) g.SetProcessTerminal(config.tty) |