kernel: image: "mobylinux/kernel:4.9.x" cmdline: "console=ttyS0 console=tty0 page_poison=1" init: - "mobylinux/init:c0007f0cdf1ef821a981fcc676e3f1c2dd9ab5b1" onboot: - name: sysctl image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c" net: host pid: host ipc: host capabilities: - CAP_SYS_ADMIN readonly: true services: - name: rngd image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9" capabilities: - CAP_SYS_ADMIN oomScoreAdj: -800 readonly: true - name: dhcpcd image: "mobylinux/dhcpcd:0d4012269cb142972fed8542fbdc3ff5a7b695cd" binds: - /var:/var - /tmp/etc:/etc capabilities: - CAP_NET_ADMIN - CAP_NET_BIND_SERVICE - CAP_NET_RAW net: host oomScoreAdj: -800 - name: swarmd image: "mobylinux/swarmd:cf11a7626278ebf17efe2780c138b4e626b02c73" command: ["/usr/bin/swarmd", "--containerd-addr=/run/containerd/containerd.sock", "--log-level=debug", "--state-dir=/var/lib/containerd/swarmd"] capabilities: - CAP_CHOWN - CAP_DAC_OVERRIDE - CAP_FSETID - CAP_FOWNER - CAP_MKNOD - CAP_NET_RAW - CAP_SETGID - CAP_SETUID - CAP_SETFCAP - CAP_SETPCAP - CAP_NET_BIND_SERVICE - CAP_SYS_CHROOT - CAP_KILL - CAP_AUDIT_WRITE net: host binds: - /run/containerd/containerd.sock:/run/containerd/containerd.sock - /var/lib/containerd:/var/lib/containerd - /etc/resolv.conf:/etc/resolv.conf outputs: - format: kernel+initrd - format: iso-bios - format: iso-efi