ctr: add privileged-without-host-devices for run command#7328
ctr: add privileged-without-host-devices for run command#7328dmcgowan merged 1 commit intocontainerd:mainfrom
Conversation
For Kata Containers, starting a privileged container will fail if passing all host devices to container due to the permission issue, like the `privileged_without_host_devices` for CRI service, add a `privileged-without-host-devices` to `ctr run` command will disable passing all host devices to containers. Signed-off-by: bin liu <[email protected]>
|
Hi @liubin. Thanks for your PR. I'm waiting for a containerd member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
|
@AkihiroSuda PTAL |
|
@liubin How can I resolve the above issue using the Docker CLI? |
For Kata Containers, starting a privileged container will fail
if passing all host devices to container due to the permission
issue, like the
privileged_without_host_devicesfor CRI service,add a
privileged-without-host-devicestoctr runcommand willdisable passing all host devices to containers.
Signed-off-by: bin liu [email protected]