mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-08-11 03:15:44 +00:00
|
|
||
|---|---|---|
| .. | ||
| .gitignore | ||
| go.mod | ||
| go.sum | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| seccomp.json | ||
| seccomp_default_linux.go | ||
| seccomp_linux.go | ||
| seccomp_unsupported.go | ||
| types.go | ||
containers-golang
containers-golang is a set of Go libraries used by container runtimes to generate and load seccomp mappings into the kernel.
seccomp (short for secure computing mode) is a BPF based syscall filter language and present a more conventional function-call based filtering interface that should be familiar to, and easily adopted by, application developers.
Building
make - Generates seccomp.json file, which contains the whitelisted syscalls that can be used by container runtime engines like CRI-O, Buildah, Podman and Docker, and container runtimes like OCI Runc to controll the syscalls available to containers.
Supported build tags
seccomp
Contributing
When developing this library, please use make (or make … BUILDTAGS=…) to take advantage of the tests and validation.
Contact
- IRC: #containers on freenode.net