mirror of
https://github.com/linuxkit/linuxkit.git
synced 2026-01-30 00:05:53 +00:00
d69c69c90a
This adds things like getenforce and setenforce. Signed-off-by: Tycho Andersen <tycho@docker.com>
29 lines
828 B
YAML
29 lines
828 B
YAML
kernel:
|
|
image: "mobylinux/kernel-selinux:4.9.x"
|
|
cmdline: "console=ttyS0 page_poison=1 security=selinux selinux=1"
|
|
init: "mobylinux/init:b5249a412536b4e69f8e1f668680d2ae185cc505"
|
|
system:
|
|
- name: sysctl
|
|
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
|
|
network_mode: host
|
|
pid: host
|
|
ipc: host
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
read_only: true
|
|
daemon:
|
|
- name: rngd
|
|
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9@sha256:1c93c1db7196f6f71f8e300bc1d15f0376dd18e8891c8789d77c8ff19f3a9a92"
|
|
capabilities:
|
|
- CAP_SYS_ADMIN
|
|
oom_score_adj: -800
|
|
read_only: true
|
|
command: [/bin/tini, /usr/sbin/rngd, -f]
|
|
files:
|
|
- path: etc/docker/daemon.json
|
|
contents: '{"debug": true}'
|
|
outputs:
|
|
- format: kernel+initrd
|
|
- format: iso-bios
|
|
- format: iso-efi
|