mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-07-19 01:06:27 +00:00
swarmd: host pid namespace for CNI access to /proc/PID/ns/net
Since containers are spawned by containerd (which is in the host PID namespace) and not in the swarmd container's namespace. Signed-off-by: Ian Campbell <ian.campbell@docker.com>
This commit is contained in:
parent
2388f483c3
commit
8e90e67eea
@ -48,6 +48,7 @@ services:
|
||||
- CAP_SYS_CHROOT
|
||||
- CAP_KILL
|
||||
- CAP_AUDIT_WRITE
|
||||
pid: host
|
||||
net: host
|
||||
binds:
|
||||
- /run/containerd/containerd.sock:/run/containerd/containerd.sock
|
||||
|
Loading…
Reference in New Issue
Block a user