specconv

Documentation

Index

• func ToRootfulInRootless(spec *specs.Spec)
• func ToRootless(spec *specs.Spec, v2Controllers []string) error

Functions

func ToRootfulInRootless

func ToRootfulInRootless(spec *specs.Spec)

ToRootfulInRootless is used for "rootful-in-rootless" dind; the daemon is running in UserNS but has no access to RootlessKit API socket, host filesystem, etc.

This fuction does: * Fix up OOMScoreAdj (needed since systemd v250: https://github.com/moby/moby/issues/46563)

func ToRootless

func ToRootless(spec *specs.Spec, v2Controllers []string) error

ToRootless converts spec to be compatible with "rootless" runc. * Remove non-supported cgroups * Fix up OOMScoreAdj * Fix up /proc if --pid=host * Fix up /dev/shm and /dev/mqueue if --ipc=host

v2Controllers should be non-nil only if running with v2 and systemd.