Sebastiaan van Stijn a38b96b8cd Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE ... This prevents docker from setting CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE capabilities on privileged (or CAP_ALL) containers on Kernel 5.8 and up. While these kernels support these capabilities, the current release of runc ships with an older version of /gocapability/capability, and does not know about them, causing an error to be produced. We can remove this restriction once 6dfbe9b807 is included in a runc release and once we stop supporting containerd 1.3.x (which ships with runc v1.0.0-rc92). Thanks to Anca Iordache for reporting. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>		2020-10-16 17:52:27 +02:00
..
defaults.go	Move DefaultCapabilities() to caps package	2019-11-14 21:13:16 +02:00
utils.go	Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE	2020-10-16 17:52:27 +02:00