github/containerd
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

Make the temp mount as ready only in container WithVolumes

Browse Source 
Signed-off-by: Qiutong Song <songqt01@gmail.com>
This commit is contained in:
Qiutong Song 2022-02-25 17:53:30 -08:00
parent 52471721fd
commit ec90efbe99
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
pkg/cri/opts/container.go
View File

@ -69,6 +69,12 @@ func WithVolumes(volumeMounts map[string]string) containerd.NewContainerOpts {
if err != nil { if err != nil {
return err return err
} }
// Since only read is needed, append ReadOnly mount option to prevent linux kernel
// from syncing whole filesystem in umount syscall.
if len(mounts) == 1 && mounts[0].Type == "overlay" {
mounts[0].Options = append(mounts[0].Options, "ro")
}
root, err := os.MkdirTemp("", "ctd-volume") root, err := os.MkdirTemp("", "ctd-volume")
if err != nil { if err != nil {
return err return err