swarmd: host pid namespace for CNI access to /proc/PID/ns/net

Since containers are spawned by containerd (which is in the host PID namespace)
and not in the swarmd container's namespace.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
This commit is contained in:
Ian Campbell 2017-04-06 09:29:36 +01:00
parent 2388f483c3
commit 8e90e67eea

View File

@ -48,6 +48,7 @@ services:
- CAP_SYS_CHROOT - CAP_SYS_CHROOT
- CAP_KILL - CAP_KILL
- CAP_AUDIT_WRITE - CAP_AUDIT_WRITE
pid: host
net: host net: host
binds: binds:
- /run/containerd/containerd.sock:/run/containerd/containerd.sock - /run/containerd/containerd.sock:/run/containerd/containerd.sock