Merge pull request #7874 from thaJeztah/appendOSMounts_error
oci: appendOSMounts(): remove unused error, and move
This commit is contained in:
commit
729206f6d0
@ -68,3 +68,6 @@ func defaultMounts() []specs.Mount {
|
|||||||
},
|
},
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// appendOSMounts is only used on FreeBSD, and a no-op on other platforms.
|
||||||
|
func appendOSMounts(_ *Spec, _ string) {}
|
||||||
|
@ -35,3 +35,31 @@ func defaultMounts() []specs.Mount {
|
|||||||
},
|
},
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
// appendOSMounts modifies the mount spec to mount emulated Linux filesystems on FreeBSD,
|
||||||
|
// as per: https://wiki.freebsd.org/LinuxJails
|
||||||
|
func appendOSMounts(s *Spec, os string) {
|
||||||
|
// No-op for FreeBSD containers
|
||||||
|
if os != "linux" {
|
||||||
|
return
|
||||||
|
}
|
||||||
|
/* The nosuid noexec options are for consistency with Linux mounts: on FreeBSD it is
|
||||||
|
by default impossible to execute anything from these filesystems.
|
||||||
|
*/
|
||||||
|
var mounts = []specs.Mount{
|
||||||
|
{
|
||||||
|
Destination: "/proc",
|
||||||
|
Type: "linprocfs",
|
||||||
|
Source: "linprocfs",
|
||||||
|
Options: []string{"nosuid", "noexec"},
|
||||||
|
},
|
||||||
|
{
|
||||||
|
Destination: "/sys",
|
||||||
|
Type: "linsysfs",
|
||||||
|
Source: "linsysfs",
|
||||||
|
Options: []string{"nosuid", "noexec", "nodev"},
|
||||||
|
},
|
||||||
|
}
|
||||||
|
|
||||||
|
s.Mounts = append(mounts, s.Mounts...)
|
||||||
|
}
|
||||||
|
@ -1,21 +0,0 @@
|
|||||||
/*
|
|
||||||
Copyright The containerd Authors.
|
|
||||||
|
|
||||||
Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
you may not use this file except in compliance with the License.
|
|
||||||
You may obtain a copy of the License at
|
|
||||||
|
|
||||||
http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
|
|
||||||
Unless required by applicable law or agreed to in writing, software
|
|
||||||
distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
See the License for the specific language governing permissions and
|
|
||||||
limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package oci
|
|
||||||
|
|
||||||
func appendOSMounts(s *Spec, os string) error {
|
|
||||||
return nil
|
|
||||||
}
|
|
@ -1,50 +0,0 @@
|
|||||||
/*
|
|
||||||
Copyright The containerd Authors.
|
|
||||||
|
|
||||||
Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
you may not use this file except in compliance with the License.
|
|
||||||
You may obtain a copy of the License at
|
|
||||||
|
|
||||||
http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
|
|
||||||
Unless required by applicable law or agreed to in writing, software
|
|
||||||
distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
See the License for the specific language governing permissions and
|
|
||||||
limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package oci
|
|
||||||
|
|
||||||
import (
|
|
||||||
specs "github.com/opencontainers/runtime-spec/specs-go"
|
|
||||||
)
|
|
||||||
|
|
||||||
// appendOSMounts modifies the mount spec to mount emulated Linux filesystems on FreeBSD,
|
|
||||||
// as per: https://wiki.freebsd.org/LinuxJails
|
|
||||||
func appendOSMounts(s *Spec, os string) error {
|
|
||||||
// No-op for FreeBSD containers
|
|
||||||
if os != "linux" {
|
|
||||||
return nil
|
|
||||||
}
|
|
||||||
/* The nosuid noexec options are for consistency with Linux mounts: on FreeBSD it is
|
|
||||||
by default impossible to execute anything from these filesystems.
|
|
||||||
*/
|
|
||||||
var mounts = []specs.Mount{
|
|
||||||
{
|
|
||||||
Destination: "/proc",
|
|
||||||
Type: "linprocfs",
|
|
||||||
Source: "linprocfs",
|
|
||||||
Options: []string{"nosuid", "noexec"},
|
|
||||||
},
|
|
||||||
{
|
|
||||||
Destination: "/sys",
|
|
||||||
Type: "linsysfs",
|
|
||||||
Source: "linsysfs",
|
|
||||||
Options: []string{"nosuid", "noexec", "nodev"},
|
|
||||||
},
|
|
||||||
}
|
|
||||||
|
|
||||||
s.Mounts = append(mounts, s.Mounts...)
|
|
||||||
return nil
|
|
||||||
}
|
|
@ -176,7 +176,3 @@ func WithRdt(closID, l3CacheSchema, memBwSchema string) SpecOpts {
|
|||||||
func escapeAndCombineArgs(args []string) string {
|
func escapeAndCombineArgs(args []string) string {
|
||||||
panic("not supported")
|
panic("not supported")
|
||||||
}
|
}
|
||||||
|
|
||||||
func appendOSMounts(s *Spec, os string) error {
|
|
||||||
return nil
|
|
||||||
}
|
|
||||||
|
@ -115,7 +115,3 @@ func escapeAndCombineArgs(args []string) string {
|
|||||||
}
|
}
|
||||||
return strings.Join(escaped, " ")
|
return strings.Join(escaped, " ")
|
||||||
}
|
}
|
||||||
|
|
||||||
func appendOSMounts(s *Spec, os string) error {
|
|
||||||
return nil
|
|
||||||
}
|
|
||||||
|
Loading…
Reference in New Issue
Block a user