oci

Documentation

Index

• Variables
• func DefaultConfig() (*generate.Generator, error)
• func DefaultConfigV1() (*generate.Generator, error)
• func DefaultConfigV2() (*generate.Generator, error)
• type Config
  • func (c *Config) MarshalJSON() ([]byte, error)
  • func (c *Config) UnmarshalJSON(b []byte) error

Variables

var DefaultCaps = []string{
	"CAP_NET_RAW",
	"CAP_NET_BIND_SERVICE",
	"CAP_AUDIT_READ",
	"CAP_AUDIT_WRITE",
	"CAP_DAC_OVERRIDE",
	"CAP_SETFCAP",
	"CAP_SETPCAP",
	"CAP_SETGID",
	"CAP_SETUID",
	"CAP_MKNOD",
	"CAP_CHOWN",
	"CAP_FOWNER",
	"CAP_FSETID",
	"CAP_KILL",
	"CAP_SYS_CHROOT",
}

DefaultCaps is the default set of capabilities granted to an OCI container. Ref: https://github.com/opencontainers/runc/blob/main/libcontainer/SPEC.md#security

Functions

func DefaultConfig

func DefaultConfig() (*generate.Generator, error)

DefaultConfig returns an OCI config generator with a default OCI configuration for cgroups v1 or v2 dependent on the current host.

func DefaultConfigV1

func DefaultConfigV1() (*generate.Generator, error)

DefaultConfigV1 returns an OCI config generator with a default OCI configuration for cgroups v1.

func DefaultConfigV2

func DefaultConfigV2() (*generate.Generator, error)

DefaultConfigV2 returns an OCI config generator with a default OCI configuration for cgroups v2. This is identical to v1 except that we use a cgroup namespace, and mount the namespaced cgroup fs into the container.

Types

type Config

type Config struct {
	generate.Generator
	specs.Spec
}

Config is the OCI runtime configuration.

func (*Config) MarshalJSON

func (c *Config) MarshalJSON() ([]byte, error)

MarshalJSON implements json.Marshaler.

func (*Config) UnmarshalJSON

func (c *Config) UnmarshalJSON(b []byte) error

UnmarshalJSON implements json.Unmarshaler.