mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-07-19 09:16:29 +00:00
The intention with the yaml fragment is that it specifies the set of processes that form the daemon, with minimal privileges for each component and each running inside a separate container. In addition to the normal container capabilities, there is also a new field which lets a startup process establish an RPC channel, based on a Capnp specification. This allows for extremely unprivileged components to be started, such as the `dhcp-engine` in this example which can only communicate with the outside world via the `dhcp-network` (to transmit) or `dhcp-actuator` (to alter the state of the local Linux distribution). This is a first cut at the yaml interface and the capnp, with the intention to refine it as we combine it with the rest of the existing prototype (which currently doesnt have an RPC layer). Expect more changes... Signed-off-by: Anil Madhavapeddy <anil@docker.com> |
||
---|---|---|
.. | ||
dhcp-client.yml | ||
dhcp.capnp |