Merge pull request #22976 from vdemeester/22091-condition-followup
Invert CgroupDevicesEnabled condition Upstream-commit: 56359cccbc9634c3cb37b1e9eb53160b6a4ffe38 Component: engine
This commit is contained in:
@@ -550,8 +550,8 @@ func NewDaemon(config *Config, registryService registry.Service, containerdRemot
|
||||
|
||||
sysInfo := sysinfo.New(false)
|
||||
// Check if Devices cgroup is mounted, it is hard requirement for container security,
|
||||
// on Linux/FreeBSD.
|
||||
if runtime.GOOS != "windows" && runtime.GOOS != "solaris" && !sysInfo.CgroupDevicesEnabled {
|
||||
// on Linux.
|
||||
if runtime.GOOS == "linux" && !sysInfo.CgroupDevicesEnabled {
|
||||
return nil, fmt.Errorf("Devices cgroup isn't mounted")
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user