Add support for encrypted swap

Update examples/swap.yml to use latest linuxkit/swap image
Add comment to examples/swap.yml how to enable encryption
Add encrypt options to README
Make encrypted swap the default

Signed-off-by: Avi Deitcher <avi@deitcher.net>
This commit is contained in:
Avi Deitcher
2017-04-29 23:46:57 +03:00
parent 805be09669
commit aebd255755
4 changed files with 19 additions and 9 deletions

View File

@@ -48,16 +48,19 @@ onboot:
rootfsPropagation: shared
command: ["/mount.sh", "/var/external"]
- name: swap
image: "linuxkit/swap:d089b31acad8a5f6a5f1c368ddd1dfe1d049b100"
image: "linuxkit/swap:a881d50445ea27624be67dcda39313e7a2051982"
net: host
pid: host
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
readonly: true
binds:
- /var:/var
- /dev:/dev
command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
# to use unencrypted swap, use:
# command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"]
services:
- name: rngd
image: "linuxkit/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9"