mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
c5251f7116
Until we can support existing behaviour with `sudo` disable ambient capabilities in runc build. Add tests that non root user cannot use default capabilities, and that capabilities are working as expected. Test for #27590 Update runc. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
39 lines
1,003 B
Go
39 lines
1,003 B
Go
package configs
|
|
|
|
const (
|
|
// EXT_COPYUP is a directive to copy up the contents of a directory when
|
|
// a tmpfs is mounted over it.
|
|
EXT_COPYUP = 1 << iota
|
|
)
|
|
|
|
type Mount struct {
|
|
// Source path for the mount.
|
|
Source string `json:"source"`
|
|
|
|
// Destination path for the mount inside the container.
|
|
Destination string `json:"destination"`
|
|
|
|
// Device the mount is for.
|
|
Device string `json:"device"`
|
|
|
|
// Mount flags.
|
|
Flags int `json:"flags"`
|
|
|
|
// Propagation Flags
|
|
PropagationFlags []int `json:"propagation_flags"`
|
|
|
|
// Mount data applied to the mount.
|
|
Data string `json:"data"`
|
|
|
|
// Relabel source if set, "z" indicates shared, "Z" indicates unshared.
|
|
Relabel string `json:"relabel"`
|
|
|
|
// Extensions are additional flags that are specific to runc.
|
|
Extensions int `json:"extensions"`
|
|
|
|
// Optional Command to be run before Source is mounted.
|
|
PremountCmds []Command `json:"premount_cmds"`
|
|
|
|
// Optional Command to be run after Source is mounted.
|
|
PostmountCmds []Command `json:"postmount_cmds"`
|
|
}
|