erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-09-28 10:37:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
spiegel_podman/pkg
History
Daniel J Walsh b163640c61
Allow devs to set labels in container images for default capabilities. 
This patch allows users to specify the list of capabilities required
to run their container image.

Setting a image/container label "io.containers.capabilities=setuid,setgid"
tells podman that the contained image should work fine with just these two
capabilties, instead of running with the default capabilities, podman will
launch the container with just these capabilties.

If the user or image specified capabilities that are not in the default set,
the container will print an error message and will continue to run with the
default capabilities.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-03-02 16:37:32 -05:00
..
adapter network create should use firewall plugin 2020-02-27 14:39:31 -06:00
annotations Add ContainerManager annotation to created containers 2019-09-10 09:37:14 +02:00
api rework apiv2 wait endpoint|binding 2020-02-28 09:36:53 -06:00
apparmor apparmor: allow receiving of signals from 'podman kill' 2020-01-24 15:34:47 +01:00
bindings Merge pull request #5347 from baude/apiv2wait 2020-03-02 20:23:26 +01:00
cgroups stats: add SystemUsage 2020-02-12 11:58:29 +01:00
channelwriter account for varlink calls that dont use more 2019-07-10 08:50:05 -05:00
criu Add helper function to read out CRIU version 2018-10-23 12:52:03 +02:00
ctime Re-add int64 casts for ctime 2019-07-23 15:43:40 -04:00
errorhandling first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
hooks make lint: include unit tests 2020-01-14 10:51:59 +01:00
inspect inspect image healthchecks 2020-01-27 08:36:25 -06:00
kubeutils Remove dependency on kubernetes 2018-03-27 21:55:33 +00:00
logs first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
lookup execuser: look at the source for /etc/{passwd,group} overrides 2019-09-21 22:11:09 +02:00
namespaces namespaces: by default create cgroupns on cgroups v2 2019-11-05 17:29:01 +01:00
netns network: hide EPERM warning when rootless 2019-10-01 08:51:58 +02:00
network network create should use firewall plugin 2020-02-27 14:39:31 -06:00
registrar Update registrar unit tests to match them of cri-o 2019-04-04 08:53:32 +02:00
registries podman: mirror information 2019-12-12 19:53:46 -03:00
resolvconf Use host's resolv.conf if no network namespace enabled 2018-11-27 15:28:09 -05:00
rootless Merge pull request #5324 from giuseppe/fix-running-no-pause 2020-02-25 21:16:26 +01:00
rootlessport rootlessport: drop Pdeathsig in favor of Kill 2020-02-12 18:48:42 +01:00
seccomp apiv2 container create using specgen 2020-02-19 15:20:15 -06:00
signal add pkg/signal 2020-02-14 15:04:14 +01:00
spec Allow devs to set labels in container images for default capabilities. 2020-03-02 16:37:32 -05:00
specgen Allow devs to set labels in container images for default capabilities. 2020-03-02 16:37:32 -05:00
sysinfo Setup a reasonable default for pids-limit 4096 2019-10-04 16:09:13 -04:00
systemd Fix handler and systemd activation errors 2020-02-17 10:29:32 -07:00
timetype make lint: enable gocritic 2020-01-13 14:27:02 +01:00
tracing make lint: include pkg/tracing 2020-01-14 09:54:48 +01:00
trust codespell: spelling corrections 2019-11-13 08:15:00 +11:00
util utils: relax check for directory to use 2020-02-24 21:26:16 +01:00
varlinkapi Add network options to podman pod create 2020-02-19 11:29:30 -05:00