
From the runc v1.0.0-rc93 release notes: > The "selinux" and "apparmor" buildtags have been removed, and now all runc > builds will have SELinux and AppArmor support enabled. Note that "seccomp" > is still optional (though we very highly recommend you enable it). Also adding a note about kmem support. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
51 lines
1.4 KiB
Bash
Executable File
51 lines
1.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Copyright The containerd Authors.
|
|
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
#
|
|
# Builds and installs runc to /usr/local/go/bin based off
|
|
# the commit defined in go.mod
|
|
#
|
|
set -eu -o pipefail
|
|
|
|
function install_runc() {
|
|
RUNC_COMMIT=$(grep opencontainers/runc "$GOPATH"/src/github.com/containerd/containerd/go.mod | awk '{print $2}')
|
|
|
|
TMPROOT=$(mktemp -d)
|
|
git clone https://github.com/opencontainers/runc.git "${TMPROOT}"/runc
|
|
pushd "${TMPROOT}"/runc
|
|
git checkout "${RUNC_COMMIT}"
|
|
make runc
|
|
make install
|
|
popd
|
|
rm -fR "${TMPROOT}"
|
|
}
|
|
|
|
function install_crun() {
|
|
CRUN_VERSION=0.17
|
|
curl -o /usr/local/sbin/runc -L https://github.com/containers/crun/releases/download/"${CRUN_VERSION}"/crun-"${CRUN_VERSION}"-linux-"$(go env GOARCH)"
|
|
chmod +x /usr/local/sbin/runc
|
|
}
|
|
|
|
: "${RUNC_FLAVOR:=runc}"
|
|
case ${RUNC_FLAVOR} in
|
|
runc) install_runc ;;
|
|
crun) install_crun ;;
|
|
*)
|
|
echo >&2 "unknown runc flavor: ${RUNC_FLAVOR}"
|
|
exit 1
|
|
;;
|
|
esac
|