Define readonly/mask paths in spec

This vendors in new spec/runc that supports
setting readonly and masked paths in the 
configuration. Using this allows us to make an
exception for `—-privileged`.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Upstream-commit: 3f81b4935292d5daedea9de4e2db0895986115da
Component: engine
This commit is contained in:
Tonis Tiigi
2016-04-04 14:27:44 -07:00
parent 52fd3a7265
commit ac4137daba
13 changed files with 40 additions and 20 deletions

View File

@ -57,7 +57,7 @@ ENV GOPATH /go:/go/src/github.com/docker/docker/vendor
ENV CGO_LDFLAGS -L/lib
# Install runc
ENV RUNC_COMMIT 0c1c615ebd6a15545b6a82ead01d2745ea49b242
ENV RUNC_COMMIT 6c88a526cdd74aab90cc88018368c452c7294a06
RUN set -x \
&& export GOPATH="$(mktemp -d)" \
&& git clone https://github.com/opencontainers/runc.git "$GOPATH/src/github.com/opencontainers/runc" \