specbuilder

Documentation

Index

• Variables
• func AllowSyscall(syscall string, args ...specs.LinuxSeccompArg) specs.LinuxSyscall
• func Apply(spec *specs.Spec, opts ...SpecOption)
• func Build(opts ...SpecOption) *specs.Spec
• func DefaultPrivilegedCapabilities() []string
• func DefaultSeccomp() *specs.LinuxSeccomp
• func DefaultSpec() *specs.Spec
• type SpecOption
  • func WithCapabilities(capabilities []string) SpecOption
  • func WithMemoryLimit(limit int64, features sysfeat.Features) SpecOption
  • func WithMounts(mounts []specs.Mount) SpecOption
  • func WithNamespace(namespace specs.LinuxNamespaceType) SpecOption
  • func WithOpenFileLimit(limit uint64) SpecOption
  • func WithPidLimit(limit int64) SpecOption
  • func WithPrivileged() SpecOption
  • func WithProcess(executable string, args []string, environment []string, cwd string) SpecOption
  • func WithRootFilesystem(path string) SpecOption
  • func WithUser(user specs.User) SpecOption

Variables

var RootUser = specs.User{
	UID: 0,
	GID: 0,
}

Functions

func AllowSyscall

func AllowSyscall(syscall string, args ...specs.LinuxSeccompArg) specs.LinuxSyscall

func Apply

func Apply(spec *specs.Spec, opts ...SpecOption)

func Build

func Build(opts ...SpecOption) *specs.Spec

func DefaultPrivilegedCapabilities

func DefaultPrivilegedCapabilities() []string

func DefaultSeccomp

func DefaultSeccomp() *specs.LinuxSeccomp

func DefaultSpec

func DefaultSpec() *specs.Spec

Types

type SpecOption

type SpecOption func(*specs.Spec)

func WithCapabilities

func WithCapabilities(capabilities []string) SpecOption

func WithMemoryLimit

func WithMemoryLimit(limit int64, features sysfeat.Features) SpecOption

func WithMounts

func WithMounts(mounts []specs.Mount) SpecOption

func WithNamespace

func WithNamespace(namespace specs.LinuxNamespaceType) SpecOption

func WithOpenFileLimit

func WithOpenFileLimit(limit uint64) SpecOption

func WithPidLimit

func WithPidLimit(limit int64) SpecOption

func WithPrivileged

func WithPrivileged() SpecOption

func WithProcess

func WithProcess(
	executable string,
	args []string,
	environment []string,
	cwd string,
) SpecOption

func WithRootFilesystem

func WithRootFilesystem(path string) SpecOption

func WithUser

func WithUser(user specs.User) SpecOption