1
0
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-09-23 01:37:27 +00:00

FC: Removed redundant --seccomp-level jailer parameter

Firecracker has removed redundant `--seccomp-level` jailer parameter
since it can be simply forwarded to the Firecracker executable using
"end of command options" convention.
Related PR: https://github.com/firecracker-microvm/firecracker/pull/1491
Since kata is just using default seccomp level for firecracker, here
then we just removed the setting for jailer.

Fixes: 

Signed-off-by: Penny Zheng <penny.zheng@arm.com>
This commit is contained in:
Penny Zheng
2020-02-28 05:07:27 +00:00
parent d2cae59ec7
commit 2945bcd796

@@ -361,7 +361,6 @@ func (fc *firecracker) fcInit(timeout int) error {
jailedArgs := []string{
"--id", fc.id,
"--node", "0", //FIXME: Comprehend NUMA topology or explicit ignore
"--seccomp-level", "2",
"--exec-file", fc.config.HypervisorPath,
"--uid", "0", //https://github.com/kata-containers/runtime/issues/1869
"--gid", "0",