docker-cli

Files

Abin Shahab fb6083d3f6 use lxc.auto.mount to ensure proc and sys are readonly

Set lxc.auto.mount = proc:mixed in unprivilged mode. This ensures that lxc mounts sys and proc/sysrq-trigger as readonly.
Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale)
Docker-DCO-1.1-Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale)
Upstream-commit: d821c63e0d5fe2abe10ff885de6298acc4db956e
Component: engine

2015-01-18 09:27:16 +00:00

execdrivers

update go import path and libcontainer

2014-07-24 22:19:50 +00:00

lxc

use lxc.auto.mount to ensure proc and sys are readonly

2015-01-18 09:27:16 +00:00

native

Merge pull request #10093 from crosbymichael/readonly-containers

2015-01-14 15:56:51 -08:00

driver.go

Add --readonly for read only container rootfs