mirror of
https://github.com/linuxkit/linuxkit.git
synced 2026-04-02 22:07:38 +00:00
13a1ffdd44
This adds all the cgroup restrictions into the spec. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
50 lines
1.4 KiB
YAML
50 lines
1.4 KiB
YAML
kernel:
|
|
image: "linuxkit/kernel:4.9.x"
|
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
|
init:
|
|
- linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
|
|
- linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
|
|
- linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
|
|
- linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
|
|
onboot:
|
|
- name: sysctl
|
|
image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
|
|
- name: binfmt
|
|
image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
|
|
- name: dhcpcd
|
|
image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
|
|
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
|
|
onshutdown:
|
|
- name: shutdown
|
|
image: busybox:latest
|
|
command: ["/bin/echo", "so long and thanks for all the fish"]
|
|
services:
|
|
- name: rngd
|
|
image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
|
|
- name: nginx
|
|
image: "nginx:alpine"
|
|
capabilities:
|
|
- CAP_NET_BIND_SERVICE
|
|
- CAP_CHOWN
|
|
- CAP_SETUID
|
|
- CAP_SETGID
|
|
- CAP_DAC_OVERRIDE
|
|
net: host
|
|
resources:
|
|
devices:
|
|
- allow: true
|
|
access: rwm
|
|
pids:
|
|
limit: 10
|
|
files:
|
|
- path: etc/docker/daemon.json
|
|
contents: '{"debug": true}'
|
|
- path: /empty
|
|
contents: ""
|
|
- path: etc/moby-config
|
|
metadata: yaml
|
|
trust:
|
|
org:
|
|
- library
|
|
- linuxkit
|