Justin Cormack
bc23fde1c2
Use the real default containerd toml config
...
Rather than an empty one.
Signed-off-by: Justin Cormack <justin.cormack@docker.com >
2017-04-10 16:25:13 +01:00
Justin Cormack
9ee52aa966
Rework how /var is mounted
...
Instead of mounting a new filesystem, revert to doing a `rw` bind.
However do not make `/` `rshared`, just `/var` as that is where we expect
filesystems to be mounted for persistence. Also only make the actual
container rootfs writeable, not the whole directory.
Signed-off-by: Justin Cormack <justin.cormack@docker.com >
2017-04-10 11:28:00 +01:00
Riyaz Faizullabhoy
3aead78f36
landlock: example yml
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2017-04-09 12:09:06 -07:00
Riyaz Faizullabhoy
b95ca1b358
landlock: gitignore for kernel build
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2017-04-09 12:08:53 -07:00
Riyaz Faizullabhoy
f89bd06edb
landlock: Makefile with kernel-landlock name
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2017-04-09 12:07:10 -07:00
Riyaz Faizullabhoy
1e9495e609
landlock: Dockerfile
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2017-04-09 12:06:48 -07:00
Mickaël Salaün
296a0f4560
landlock: Backport patches from the sixth series
...
Backport from Linux v4.11-rc3-812-gc6bf33827b7d to Linux 4.9.20:
https://github.com/landlock-lsm/linux/commits/landlock-v6-linux-v4.9.20
Do not include documentation nor tests.
See built documentation here:
https://landlock-lsm.github.io/linux-doc/landlock-v6/security/landlock/index.html
Signed-off-by: Mickaël Salaün <mic@digikod.net >
Link: https://lkml.kernel.org/r/20170328234650.19695-1-mic@digikod.net
2017-04-09 19:45:24 +02:00
Mickaël Salaün
792238f5cb
landlock: Add kernel_config{,.debug}
...
Based on kernel_config{,.debug} from commit
724561bf69mic@digikod.net >
2017-04-09 19:45:24 +02:00
Riyaz Faizullabhoy
9effac329a
landlock: start project, add roadmap doc
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2017-04-08 20:05:39 -07:00
