cri: Fix comment typos
Beside the "in future the when" typo, we take the chance to reflect that user namespaces are already merged. Signed-off-by: Rodrigo Campos <rodrigoca@microsoft.com>
This commit is contained in:
parent
f1d2868785
commit
9d9903565a
@ -100,9 +100,9 @@ func (c *Controller) sandboxContainerSpec(id string, config *runtime.PodSandboxC
|
|||||||
}
|
}
|
||||||
// Remove the default /dev/shm mount from defaultMounts, it is added in oci/mounts.go.
|
// Remove the default /dev/shm mount from defaultMounts, it is added in oci/mounts.go.
|
||||||
specOpts = append(specOpts, oci.WithoutMounts(devShm))
|
specOpts = append(specOpts, oci.WithoutMounts(devShm))
|
||||||
// In future the when user-namespace is enabled, the `nosuid, nodev, noexec` flags are
|
// When user-namespace is enabled, the `nosuid, nodev, noexec` flags are
|
||||||
// required, otherwise the remount will fail with EPERM. Just use them unconditionally,
|
// required, otherwise the remount will fail with EPERM. Just use them
|
||||||
// they are nice to have anyways.
|
// unconditionally, they are nice to have anyways.
|
||||||
specOpts = append(specOpts, oci.WithMounts([]runtimespec.Mount{
|
specOpts = append(specOpts, oci.WithMounts([]runtimespec.Mount{
|
||||||
{
|
{
|
||||||
Source: sandboxDevShm,
|
Source: sandboxDevShm,
|
||||||
|
Loading…
Reference in New Issue
Block a user