Julio Montes 8f5a69373b virtcontainers: apply constraints to the sandbox cgroup ...

Kata relies on the cgroup parent created and configured by the container
engine, but sometimes the sandbox cgroup is not configured and the container
may have access to all the resources, hence the runtime must constrain the
sandbox and update the list of devices with the devices hotplugged in the
hypervisor.

Fixes: kata-containers/runtime#2605
Signed-off-by: Julio Montes <julio.montes@intel.com>
Signed-off-by: Peng Tao <bergwolf@hyper.sh>

2020-05-26 00:50:23 -07:00

..

agent

agent: hardcode the Cargo.lock file

2020-05-26 11:39:07 +08:00

runtime

virtcontainers: apply constraints to the sandbox cgroup

2020-05-26 00:50:23 -07:00