f6bf4c8510
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com> (github: crosbymichael) Upstream-commit: 77f68f74c7e6fc977fb2681c7ee60ac652be983e Component: engine
42 lines
1.1 KiB
Go
42 lines
1.1 KiB
Go
package docker
|
|
|
|
import (
|
|
"github.com/dotcloud/docker/pkg/cgroups"
|
|
"github.com/dotcloud/docker/pkg/libcontainer"
|
|
)
|
|
|
|
// getDefaultTemplate returns the docker default for
|
|
// the libcontainer configuration file
|
|
func getDefaultTemplate() *libcontainer.Container {
|
|
return &libcontainer.Container{
|
|
Capabilities: libcontainer.Capabilities{
|
|
libcontainer.CAP_SETPCAP,
|
|
libcontainer.CAP_SYS_MODULE,
|
|
libcontainer.CAP_SYS_RAWIO,
|
|
libcontainer.CAP_SYS_PACCT,
|
|
libcontainer.CAP_SYS_ADMIN,
|
|
libcontainer.CAP_SYS_NICE,
|
|
libcontainer.CAP_SYS_RESOURCE,
|
|
libcontainer.CAP_SYS_TIME,
|
|
libcontainer.CAP_SYS_TTY_CONFIG,
|
|
libcontainer.CAP_MKNOD,
|
|
libcontainer.CAP_AUDIT_WRITE,
|
|
libcontainer.CAP_AUDIT_CONTROL,
|
|
libcontainer.CAP_MAC_ADMIN,
|
|
libcontainer.CAP_MAC_OVERRIDE,
|
|
libcontainer.CAP_NET_ADMIN,
|
|
},
|
|
Namespaces: libcontainer.Namespaces{
|
|
libcontainer.CLONE_NEWIPC,
|
|
libcontainer.CLONE_NEWNET,
|
|
libcontainer.CLONE_NEWNS,
|
|
libcontainer.CLONE_NEWPID,
|
|
libcontainer.CLONE_NEWUTS,
|
|
},
|
|
Cgroups: &cgroups.Cgroup{
|
|
Parent: "docker",
|
|
DeviceAccess: false,
|
|
},
|
|
}
|
|
}
|