mirror of
https://github.com/linuxkit/linuxkit.git
synced 2025-12-26 17:24:44 +00:00
81 lines
2.2 KiB
YAML
81 lines
2.2 KiB
YAML
kernel:
|
|
image: "linuxkit/kernel:4.9.x"
|
|
cmdline: "console=ttyS0 console=tty0 page_poison=1"
|
|
init:
|
|
- linuxkit/init:42fe8cb1508b3afed39eb89821906e3cc7a70551
|
|
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6
|
|
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61
|
|
- linuxkit/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
|
|
onboot:
|
|
- name: sysctl
|
|
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64"
|
|
- name: binfmt
|
|
image: "linuxkit/binfmt:548f7f044f5411a8938913527c5ce55d9876bb07"
|
|
binds:
|
|
- /proc/sys/fs/binfmt_misc:/binfmt_misc
|
|
readonly: true
|
|
- name: dhcpcd
|
|
image: "linuxkit/dhcpcd:cb96c09a33c166eca6530f166f0f79927c3e83b0"
|
|
binds:
|
|
- /var:/var
|
|
- /tmp/etc:/etc
|
|
capabilities:
|
|
- CAP_NET_ADMIN
|
|
- CAP_NET_BIND_SERVICE
|
|
- CAP_NET_RAW
|
|
net: host
|
|
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
|
|
- name: format
|
|
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551"
|
|
binds:
|
|
- /dev:/dev
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
- CAP_MKNOD
|
|
- name: mount
|
|
image: "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752"
|
|
binds:
|
|
- /dev:/dev
|
|
- /var:/var:rshared,rbind
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
rootfsPropagation: shared
|
|
command: ["/mount.sh", "/var/external"]
|
|
- name: swap
|
|
image: "linuxkit/swap:c4c723a3d6678dc49770181bbb231ec99b271c75"
|
|
net: host
|
|
pid: host
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
- CAP_MKNOD
|
|
readonly: true
|
|
binds:
|
|
- /var:/var
|
|
- /dev:/dev
|
|
# to use unencrypted swap, use:
|
|
# command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
|
|
command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"]
|
|
services:
|
|
- name: rngd
|
|
image: "linuxkit/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9"
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
oomScoreAdj: -800
|
|
readonly: true
|
|
- name: nginx
|
|
image: "nginx:alpine"
|
|
capabilities:
|
|
- CAP_NET_BIND_SERVICE
|
|
- CAP_CHOWN
|
|
- CAP_SETUID
|
|
- CAP_SETGID
|
|
- CAP_DAC_OVERRIDE
|
|
net: host
|
|
trust:
|
|
image:
|
|
- linuxkit/kernel
|
|
outputs:
|
|
- format: kernel+initrd
|
|
- format: iso-bios
|
|
- format: iso-efi
|