containerd/pkg/cri/opts
Akihiro Suda a2d1a8a865
oci.WithPrivileged: set the current caps, not the known caps
This change is needed for running the latest containerd inside Docker
that is not aware of the recently added caps (BPF, PERFMON, CHECKPOINT_RESTORE).

Without this change, containerd inside Docker fails to run containers with
"apply caps: operation not permitted" error.

See kubernetes-sigs/kind 2058

NOTE: The caller process of this function is now assumed to be as
privileged as possible.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2021-02-10 17:14:17 +09:00
..
container.go Cri - Pass snapshotter labels into customopts.WithNewSnapshot 2020-10-14 04:14:03 -07:00
spec_linux_test.go Refactor pkg packages 2020-10-08 17:30:17 -07:00
spec_linux.go oci.WithPrivileged: set the current caps, not the known caps 2021-02-10 17:14:17 +09:00
spec_test.go Refactor pkg packages 2020-10-08 17:30:17 -07:00
spec_windows.go Refactor pkg packages 2020-10-08 17:30:17 -07:00
spec.go Refactor pkg packages 2020-10-08 17:30:17 -07:00
task.go Refactor pkg packages 2020-10-08 17:30:17 -07:00