spiegel_podman/docs/source/markdown
Valentin Rothberg f3f4c54f2a policy for seccomp-profile selection
Implement a policy for selecting a seccomp profile.  In addition to the
default behaviour (default profile unless --security-opt seccomp is set)
add a second policy doing a lookup in the image annotation.

If the image has the "io.containers.seccomp.profile" set its value will be
interpreted as a seccomp profile.  The policy can be selected via the
new --seccomp-policy CLI flag.

Once the containers.conf support is merged into libpod, we can add an
option there as well.

Note that this feature is marked as experimental and may change in the
future.

Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2020-01-09 17:57:58 +01:00
..
links Add untag sub-command 2020-01-08 10:06:10 +01:00
containers-mounts.conf.5.md [docs] Ensure we include section 5 documentation 2019-11-02 13:48:47 +01:00
libpod.conf.5.md [docs] Ensure we include section 5 documentation 2019-11-02 13:48:47 +01:00
podman-attach.1.md Allow users to disable detach keys 2019-11-05 14:10:43 -05:00
podman-build.1.md docs: add workaround for --device with rootless containers 2019-12-17 08:34:12 +02:00
podman-commit.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-container-checkpoint.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-container-cleanup.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-container-exists.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-container-prune.1.md man page updated with examples of filter option 2019-12-02 11:47:56 +09:00
podman-container-restore.1.md podman: add support for specifying MAC 2019-11-06 16:22:19 +01:00
podman-container-runlabel.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-container.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-cp.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-create.1.md policy for seccomp-profile selection 2020-01-09 17:57:58 +01:00
podman-diff.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-events.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-exec.1.md allow exec to read files of environment variables 2019-12-11 09:21:24 -06:00
podman-export.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-generate-kube.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-generate-systemd.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-generate.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-healthcheck-run.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-healthcheck.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-history.1.md Fix presentation of man page tables 2020-01-03 10:12:14 -05:00
podman-image-exists.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-image-prune.1.md document updated for filter and until options 2019-11-22 17:42:48 +09:00
podman-image-sign.1.md codespell: spelling corrections 2019-11-13 08:15:00 +11:00
podman-image-tree.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-image-trust.1.md (minor) fix broken links to container-policy.json.5 2020-01-06 08:34:56 -07:00
podman-image.1.md Add untag sub-command 2020-01-08 10:06:10 +01:00
podman-images.1.md Add support for image name history 2019-11-27 13:42:06 +01:00
podman-import.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-info.1.md podman info man: example update 2019-12-12 19:55:03 -03:00
podman-init.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-inspect.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-kill.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-load.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-login.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-logout.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-logs.1.md logs: support --tail 0 2019-10-31 19:55:36 +01:00
podman-mount.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-network-create.1.md macvlan networks 2019-12-09 08:40:40 -06:00
podman-network-inspect.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-network-ls.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-network-rm.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-network.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pause.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-play-kube.1.md play kube: make seccomp handling better conform to k8s 2020-01-03 13:27:17 -05:00
podman-play.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-create.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-exists.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-inspect.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-kill.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-pause.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-prune.1.md Remove containers when pruning a stopped pod. 2019-11-26 13:19:31 -05:00
podman-pod-ps.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-restart.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-rm.1.md Remove containers when pruning a stopped pod. 2019-11-26 13:19:31 -05:00
podman-pod-start.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-stats.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod-stop.1.md podman {pod,} rm/stop: add --ignore flag 2019-11-25 09:48:13 +01:00
podman-pod-top.1.md docs: update podman-{pod-,}top man pages 2019-12-11 10:50:27 +01:00
podman-pod-unpause.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-pod.1.md Remove containers when pruning a stopped pod. 2019-11-26 13:19:31 -05:00
podman-port.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-ps.1.md Fix presentation of man page tables 2020-01-03 10:12:14 -05:00
podman-pull.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-push.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-remote.1.md codespell: spelling corrections 2019-11-13 08:15:00 +11:00
podman-remote.conf.5.md [docs] Ensure we include section 5 documentation 2019-11-02 13:48:47 +01:00
podman-restart.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-rm.1.md podman {pod,} rm/stop: add --ignore flag 2019-11-25 09:48:13 +01:00
podman-rmi.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-run.1.md policy for seccomp-profile selection 2020-01-09 17:57:58 +01:00
podman-save.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-search.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-start.1.md Allow users to disable detach keys 2019-11-05 14:10:43 -05:00
podman-stats.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-stop.1.md podman {pod,} rm/stop: add --ignore flag 2019-11-25 09:48:13 +01:00
podman-system-df.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-system-migrate.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-system-prune.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-system-renumber.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-system-reset.1.md Add podman system reset command 2019-11-29 05:34:52 -05:00
podman-system.1.md Add podman system reset command 2019-11-29 05:34:52 -05:00
podman-tag.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-top.1.md docs: update podman-{pod-,}top man pages 2019-12-11 10:50:27 +01:00
podman-umount.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-unpause.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-unshare.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-untag.1.md Add untag sub-command 2020-01-08 10:06:10 +01:00
podman-varlink.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-version.1.md Fix podman-remote version to print client and server 2019-12-02 15:50:00 +01:00
podman-volume-create.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-volume-inspect.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-volume-ls.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-volume-prune.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-volume-rm.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-volume.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman-wait.1.md Update document formatting and packaging code 2019-10-31 12:31:39 -05:00
podman.1.md Add untag sub-command 2020-01-08 10:06:10 +01:00