mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-07-19 09:16:29 +00:00
swarmd: host pid namespace for CNI access to /proc/PID/ns/net
Since containers are spawned by containerd (which is in the host PID namespace) and not in the swarmd container's namespace. Signed-off-by: Ian Campbell <ian.campbell@docker.com>
This commit is contained in:
parent
2388f483c3
commit
8e90e67eea
@ -48,6 +48,7 @@ services:
|
|||||||
- CAP_SYS_CHROOT
|
- CAP_SYS_CHROOT
|
||||||
- CAP_KILL
|
- CAP_KILL
|
||||||
- CAP_AUDIT_WRITE
|
- CAP_AUDIT_WRITE
|
||||||
|
pid: host
|
||||||
net: host
|
net: host
|
||||||
binds:
|
binds:
|
||||||
- /run/containerd/containerd.sock:/run/containerd/containerd.sock
|
- /run/containerd/containerd.sock:/run/containerd/containerd.sock
|
||||||
|
Loading…
Reference in New Issue
Block a user