Files
linuxkit/projects/ima-namespace/ima-namespace.yml
Avi Deitcher 4165491275 Update package tags
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2025-01-07 18:50:58 +02:00

34 lines
1.1 KiB
YAML

kernel:
image: linuxkit/kernel-ima:4.11.1-186dd3605ee7b23214850142f8f02b4679dbd148
cmdline: "console=ttyS0 console=tty0 page_poison=1 ima_appraise=enforce_ns"
init:
- linuxkit/init:bf45651001f871323d70b746330e8c2a94f767e6
- linuxkit/runc:ab0b50b622b8e34031b6bb8b18497100a558a11d
- linuxkit/containerd:c85f857bb3ed72b91509df20d1b9b3e430160074
- linuxkit/ca-certificates:9179129925943ab3e8d4a92e986d8c87193925bc
- linuxkit/ima-utils:dfeb3896fd29308b80ff9ba7fe5b8b767e40ca29
onboot:
- name: sysctl
image: linuxkit/sysctl:118703ca489a425ee588096a3fa002ce29bf0b4c
- name: dhcpcd
image: linuxkit/dhcpcd:f67a935a3768da88a5d8252188e71b65f0feadf7
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
services:
- name: rngd
image: linuxkit/rngd:e83de73632097eab9f96593f287dc032c3da5e75
- name: nginx
image: nginx:1.13.8-alpine
capabilities:
- CAP_NET_BIND_SERVICE
- CAP_CHOWN
- CAP_SETUID
- CAP_SETGID
- CAP_DAC_OVERRIDE
files:
- path: etc/docker/daemon.json
contents: '{"debug": true}'
trust:
org:
- linuxkit
- library