Skip to content

adds explanation for seccomp unset/unconfined default vs runtime default#5573

Merged
fuweid merged 1 commit intocontainerd:masterfrom
mikebrow:seccomp-doc-nit
Jun 8, 2021
Merged

adds explanation for seccomp unset/unconfined default vs runtime default#5573
fuweid merged 1 commit intocontainerd:masterfrom
mikebrow:seccomp-doc-nit

Conversation

@mikebrow
Copy link
Copy Markdown
Member

@mikebrow mikebrow commented Jun 7, 2021

Had a question in slack from a user:

Hi，what’s the default seccomp profile for containerd? Is it undefined?  I mean if k8s provided the runtime/default , what seccomp profile would containerd use?
From this parameter settings I think it’s undefined , but I am not sure:

# unsetSeccompProfile is the profile containerd/cri will use if the provided seccomp profile is
# unset (`""`) for a container (default is `unconfined`)
unset_seccomp_profile = ""

This doc update should resolve further questions in this regard..

Signed-off-by: Mike Brown [email protected]

@theopenlab-ci
Copy link
Copy Markdown

theopenlab-ci Bot commented Jun 7, 2021

Build succeeded.

dims
dims approved these changes Jun 7, 2021
View reviewed changes
Copy link
Copy Markdown
Member

@dims dims left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@fuweid fuweid merged commit 2f0342f into containerd:master Jun 8, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@dims dims dims approved these changes

@fuweid fuweid fuweid approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mikebrow @dims @fuweid