-
-
Save futurist/879f0d1cece95655e3183b88184b806a to your computer and use it in GitHub Desktop.
Config for runc nginx
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "version": "pre-draft", | |
| "platform": { | |
| "os": "linux", | |
| "arch": "amd64" | |
| }, | |
| "process": { | |
| "terminal": false, | |
| "user": { | |
| "uid": 0, | |
| "gid": 0, | |
| "additionalGids": null | |
| }, | |
| "args": [ | |
| "nginx", "-g", "daemon off;" | |
| ], | |
| "env": [ | |
| "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", | |
| "TERM=xterm" | |
| ], | |
| "cwd": "" | |
| }, | |
| "root": { | |
| "path": "/var/lib/containers/nginx", | |
| "readonly": false | |
| }, | |
| "hostname": "shell", | |
| "mounts": [ | |
| { | |
| "type": "proc", | |
| "source": "proc", | |
| "destination": "/proc", | |
| "options": "" | |
| }, | |
| { | |
| "type": "tmpfs", | |
| "source": "tmpfs", | |
| "destination": "/dev", | |
| "options": "nosuid,strictatime,mode=755,size=65536k" | |
| }, | |
| { | |
| "type": "devpts", | |
| "source": "devpts", | |
| "destination": "/dev/pts", | |
| "options": "nosuid,noexec,newinstance,ptmxmode=0666,mode=0620,gid=5" | |
| }, | |
| { | |
| "type": "tmpfs", | |
| "source": "shm", | |
| "destination": "/dev/shm", | |
| "options": "nosuid,noexec,nodev,mode=1777,size=65536k" | |
| }, | |
| { | |
| "type": "mqueue", | |
| "source": "mqueue", | |
| "destination": "/dev/mqueue", | |
| "options": "nosuid,noexec,nodev" | |
| }, | |
| { | |
| "type": "sysfs", | |
| "source": "sysfs", | |
| "destination": "/sys", | |
| "options": "nosuid,noexec,nodev" | |
| }, | |
| { | |
| "type": "cgroup", | |
| "source": "cgroup", | |
| "destination": "/sys/fs/cgroup", | |
| "options": "nosuid,noexec,nodev,relatime,ro" | |
| } | |
| ], | |
| "hooks": { | |
| "prestart": null, | |
| "poststop": null | |
| }, | |
| "linux": { | |
| "uidMappings": null, | |
| "gidMappings": null, | |
| "rlimits": [ | |
| { | |
| "type": 7, | |
| "hard": 1024, | |
| "soft": 1024 | |
| } | |
| ], | |
| "sysctl": null, | |
| "resources": { | |
| "disableOOMKiller": false, | |
| "memory": { | |
| "limit": 0, | |
| "reservation": 0, | |
| "swap": 0, | |
| "kernel": 0, | |
| "swappiness": -1 | |
| }, | |
| "cpu": { | |
| "shares": 0, | |
| "quota": 0, | |
| "period": 0, | |
| "realtimeRuntime": 0, | |
| "realtimePeriod": 0, | |
| "cpus": "", | |
| "mems": "" | |
| }, | |
| "blockIO": { | |
| "blkioWeight": 0, | |
| "blkioWeightDevice": "", | |
| "blkioThrottleReadBpsDevice": "", | |
| "blkioThrottleWriteBpsDevice": "", | |
| "blkioThrottleReadIopsDevice": "", | |
| "blkioThrottleWriteIopsDevice": "" | |
| }, | |
| "hugepageLimits": null, | |
| "network": { | |
| "classId": "", | |
| "priorities": null | |
| } | |
| }, | |
| "namespaces": [ | |
| { | |
| "type": "pid", | |
| "path": "" | |
| }, | |
| { | |
| "type": "ipc", | |
| "path": "" | |
| }, | |
| { | |
| "type": "uts", | |
| "path": "" | |
| }, | |
| { | |
| "type": "mount", | |
| "path": "" | |
| } | |
| ], | |
| "capabilities": [ | |
| "CHOWN", | |
| "DAC_OVERRIDE", | |
| "FSETID", | |
| "FOWNER", | |
| "MKNOD", | |
| "NET_RAW", | |
| "SETGID", | |
| "SETUID", | |
| "SETFCAP", | |
| "SETPCAP", | |
| "NET_BIND_SERVICE", | |
| "SYS_CHROOT", | |
| "KILL", | |
| "AUDIT_WRITE" | |
| ], | |
| "devices": [ | |
| { | |
| "type": 99, | |
| "path": "/dev/null", | |
| "major": 1, | |
| "minor": 3, | |
| "permissions": "rwm", | |
| "fileMode": 438, | |
| "uid": 0, | |
| "gid": 0 | |
| }, | |
| { | |
| "type": 99, | |
| "path": "/dev/random", | |
| "major": 1, | |
| "minor": 8, | |
| "permissions": "rwm", | |
| "fileMode": 438, | |
| "uid": 0, | |
| "gid": 0 | |
| }, | |
| { | |
| "type": 99, | |
| "path": "/dev/full", | |
| "major": 1, | |
| "minor": 7, | |
| "permissions": "rwm", | |
| "fileMode": 438, | |
| "uid": 0, | |
| "gid": 0 | |
| }, | |
| { | |
| "type": 99, | |
| "path": "/dev/tty", | |
| "major": 5, | |
| "minor": 0, | |
| "permissions": "rwm", | |
| "fileMode": 438, | |
| "uid": 0, | |
| "gid": 0 | |
| }, | |
| { | |
| "type": 99, | |
| "path": "/dev/zero", | |
| "major": 1, | |
| "minor": 5, | |
| "permissions": "rwm", | |
| "fileMode": 438, | |
| "uid": 0, | |
| "gid": 0 | |
| }, | |
| { | |
| "type": 99, | |
| "path": "/dev/urandom", | |
| "major": 1, | |
| "minor": 9, | |
| "permissions": "rwm", | |
| "fileMode": 438, | |
| "uid": 0, | |
| "gid": 0 | |
| } | |
| ], | |
| "apparmorProfile": "", | |
| "selinuxProcessLabel": "", | |
| "seccomp": { | |
| "defaultAction": "SCMP_ACT_ALLOW", | |
| "syscalls": [] | |
| }, | |
| "rootfsPropagation": "" | |
| } | |
| } |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment