mirror of
https://github.com/linuxkit/linuxkit.git
synced 2026-01-13 19:22:01 +00:00
66d6d3a6e3
Now the issues seem fixed, switch over to containerd. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
87 lines
2.3 KiB
YAML
87 lines
2.3 KiB
YAML
kernel:
|
|
image: "linuxkit/kernel:4.9.x"
|
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
|
init:
|
|
- linuxkit/init:42fe8cb1508b3afed39eb89821906e3cc7a70551
|
|
- linuxkit/runc:2649198589ef0020d99f613adaeda45ce0093a38
|
|
- linuxkit/containerd:cf2614f5a96c569a0bd4bd54e054a65ba17d167f
|
|
- linuxkit/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
|
onboot:
|
|
- name: sysctl
|
|
image: "linuxkit/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
|
net: host
|
|
pid: host
|
|
ipc: host
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
readonly: true
|
|
- name: binfmt
|
|
image: "linuxkit/binfmt:131026c0cf6084467316395fed3b358f64bda00c"
|
|
binds:
|
|
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
|
readonly: true
|
|
- name: dhcpcd
|
|
image: "linuxkit/dhcpcd:2def74ab3f9233b4c09ebb196ba47c27c08b0ed8"
|
|
binds:
|
|
- /var:/var
|
|
- /tmp/etc:/etc
|
|
capabilities:
|
|
- CAP_NET_ADMIN
|
|
- CAP_NET_BIND_SERVICE
|
|
- CAP_NET_RAW
|
|
net: host
|
|
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
|
|
- name: format
|
|
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551"
|
|
binds:
|
|
- /dev:/dev
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
- CAP_MKNOD
|
|
- name: mount
|
|
image: "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752"
|
|
binds:
|
|
- /dev:/dev
|
|
- /var:/var:rshared,rbind
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
rootfsPropagation: shared
|
|
command: ["/mount.sh", "/var/external"]
|
|
- name: swap
|
|
image: "linuxkit/swap:a881d50445ea27624be67dcda39313e7a2051982"
|
|
net: host
|
|
pid: host
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
- CAP_MKNOD
|
|
readonly: true
|
|
binds:
|
|
- /var:/var
|
|
- /dev:/dev
|
|
# to use unencrypted swap, use:
|
|
# command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
|
|
command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"]
|
|
services:
|
|
- name: rngd
|
|
image: "linuxkit/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9"
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
oomScoreAdj: -800
|
|
readonly: true
|
|
- name: nginx
|
|
image: "nginx:alpine"
|
|
capabilities:
|
|
- CAP_NET_BIND_SERVICE
|
|
- CAP_CHOWN
|
|
- CAP_SETUID
|
|
- CAP_SETGID
|
|
- CAP_DAC_OVERRIDE
|
|
net: host
|
|
trust:
|
|
image:
|
|
- linuxkit/kernel
|
|
outputs:
|
|
- format: kernel+initrd
|
|
- format: iso-bios
|
|
- format: iso-efi
|