Files
linuxkit/projects/selinux/selinux.yml
Rolf Neugebauer b0629176ab examples: Don't use a file section if you don't need it
Exception is ./moby.yaml where it serves as an example.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-12 12:26:30 +01:00

26 lines
632 B
YAML

kernel:
image: "mobylinux/kernel-selinux:4.9.x"
cmdline: "console=ttyS0 page_poison=1 security=selinux selinux=1"
init:
- "mobylinux/init:b5249a412536b4e69f8e1f668680d2ae185cc505"
onboot:
- name: sysctl
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
net: host
pid: host
ipc: host
capabilities:
- CAP_SYS_ADMIN
readonly: true
services:
- name: rngd
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9"
capabilities:
- CAP_SYS_ADMIN
oomScoreAdj: -800
readonly: true
outputs:
- format: kernel+initrd
- format: iso-bios
- format: iso-efi