Files
linuxkit/examples/vpnkit-forwarder.yml
Ilya Dmitrichenko 86fb6ba0aa pkg/init: Mount /sys/fs/bpf
NOTE: This will be a shared mount, due to root being turned into a
shared with `MC_REC` set: `mount("", "/", "", rec|shared, "")`.
For some reason setting `shared` when mounting `/sys/fs/bpf` doesn't
work at all, perhaps that's just a kernel feature.

Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
2020-05-06 11:06:54 +01:00

39 lines
1.1 KiB
YAML

kernel:
image: linuxkit/kernel:5.4.30
cmdline: "console=ttyS0"
init:
- linuxkit/init:e93b0bf37b030238d33e04b98e90d087637f3d2c
- linuxkit/runc:f79954950022fea76b8b6f10de58cb48e4fb3878
- linuxkit/containerd:6ef473a228db6f6ee163f9b9a051102a1552a4ef
onboot:
- name: dhcpcd
image: linuxkit/dhcpcd:2f8a9b670aa6e96a09db56ec45c9f07ef2a811ee
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: mount-vpnkit
image: alpine:3.11
binds:
- /var/:/host_var:rbind,rshared
capabilities:
- CAP_SYS_ADMIN
rootfsPropagation: shared
command: ["sh", "-c", "mkdir /host_var/vpnkit && mount -v -t 9p -o trans=virtio,dfltuid=1001,dfltgid=50,version=9p2000 port /host_var/vpnkit"]
services:
- name: sshd
image: linuxkit/sshd:d5860b5fd032ca3e755e0e3ab39c918c344d8c91
- name: vpnkit-forwarder
image: linuxkit/vpnkit-forwarder:e0964f3c34f92f7e7ff7b13e360d57559c64581c
binds:
- /var/vpnkit:/port
net: host
command: ["/vpnkit-forwarder"]
files:
- path: root/.ssh/authorized_keys
source: ~/.ssh/id_rsa.pub
mode: "0600"
optional: true
trust:
org:
- linuxkit