diff --git a/runsc/config/config.go b/runsc/config/config.go index a7cecb85e..934cf79a9 100644 --- a/runsc/config/config.go +++ b/runsc/config/config.go @@ -364,9 +364,8 @@ type Config struct { // present, and reproduce them in the sandbox. ReproduceNftables bool `flag:"reproduce-nftables"` - // NetDisconnectOk indicates whether the link endpoint capability - // CapabilityDisconnectOk should be set. This allows open connections to be - // disconnected upon save. + // Indicates whether open network connections and open unix domain + // sockets should be disconnected upon save." NetDisconnectOk bool `flag:"net-disconnect-ok"` // TestOnlyAutosaveImagePath if not empty enables auto save for syscall tests diff --git a/runsc/config/flags.go b/runsc/config/flags.go index d801a8b9b..1efa70638 100644 --- a/runsc/config/flags.go +++ b/runsc/config/flags.go @@ -128,7 +128,7 @@ func RegisterFlags(flagSet *flag.FlagSet) { flagSet.Bool("EXPERIMENTAL-xdp-need-wakeup", true, "EXPERIMENTAL. Use XDP_USE_NEED_WAKEUP with XDP sockets.") // TODO(b/240191988): Figure out whether this helps and remove it as a flag. flagSet.Bool("reproduce-nat", false, "Scrape the host netns NAT table and reproduce it in the sandbox.") flagSet.Bool("reproduce-nftables", false, "Attempt to scrape and reproduce nftable rules inside the sandbox. Overrides reproduce-nat when true.") - flagSet.Bool("net-disconnect-ok", false, "Indicates whether the link endpoint capability CapabilityDisconnectOk should be set. This allows open connections to be disconnected upon save.") + flagSet.Bool("net-disconnect-ok", false, "Indicates whether open network connections and open unix domain sockets should be disconnected upon save.") // Flags that control sandbox runtime behavior: accelerator related. flagSet.Bool("nvproxy", false, "EXPERIMENTAL: enable support for Nvidia GPUs")