README
¶
containers/common
Location for shared common files and common go code to manage those files in github.com/containers repos.
The common files to one or more projects in the containers group will be kept in this repository.
It will be up to the individual projects to include the files from this repository.
seccomp
The seccomp package in pkg/seccomp is a set of Go libraries
used by container runtimes to generate and load seccomp mappings into the
kernel.
seccomp (short for secure computing mode) is a BPF based syscall filter language and present a more conventional function-call based filtering interface that should be familiar to, and easily adopted by, application developers.
Building the seccomp.json file
The make target make seccomp.json generates the seccomp.json file, which
contains the allowed list of syscalls that can be used by container runtime
engines like CRI-O, Buildah, Podman and
Docker, and container runtimes like OCI Runc to control the
syscalls available to containers.
Supported build tags
pkg/apparmor:apparmor,linuxpkg/seccomp:seccomppkg/config:darwin,remote,linux,systemdpkg/sysinfo:linux,solaris,windows,cgopkg/cgroupv2:linux
Contributing
When developing this library, please use make (or make … BUILDTAGS=…) to
take advantage of the tests and validation.
Contact
Directories
¶
| Path | Synopsis |
|---|---|
|
libnetwork
|
|
|
resolvconf
Package resolvconf provides utility code to query and update DNS configuration in /etc/resolv.conf.
|
Package resolvconf provides utility code to query and update DNS configuration in /etc/resolv.conf. |
|
pkg
|
|
|
apparmor/internal/supported/supportedfakes
Code generated by counterfeiter.
|
Code generated by counterfeiter. |
|
hooks
Package hooks implements hook configuration and handling for CRI-O and libpod.
|
Package hooks implements hook configuration and handling for CRI-O and libpod. |
|
hooks/0.1.0
Package hook is the 0.1.0 hook configuration structure.
|
Package hook is the 0.1.0 hook configuration structure. |
|
hooks/1.0.0
Package hook is the 1.0.0 hook configuration structure.
|
Package hook is the 1.0.0 hook configuration structure. |
|
hooks/exec
Package exec provides utilities for executing Open Container Initiative runtime hooks.
|
Package exec provides utilities for executing Open Container Initiative runtime hooks. |
|
report
Package report provides helper structs/methods/funcs for formatting output
|
Package report provides helper structs/methods/funcs for formatting output |
|
report/camelcase
Package camelcase is a micro package to split the words of a camelcase type string into a slice of words.
|
Package camelcase is a micro package to split the words of a camelcase type string into a slice of words. |
|
rootlessport
Rootlessport Config type for use in podman/cmd/rootlessport.
|
Rootlessport Config type for use in podman/cmd/rootlessport. |
|
signal
Signal handling for Linux only.
|
Signal handling for Linux only. |