mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-10-02 19:20:03 +00:00
The latest version of the `moby` tool now requires that the output formats be specified in the CLI not in the yaml file. Signed-off-by: Justin Cormack <justin.cormack@docker.com>
selinux
The ultimate goal here is to use SELinux as our default LSM in Moby. To this end, here are the compiler flags and userspace packages necessary to do the basics.
TODO
All the necessary binaries exist, so the next steps are:
- label the filesystem with a default label
- have a policy that contains containerd
- label each container's files seprately, and contain them each with a policy
- policies for other system daemons