mirror of
https://github.com/netbirdio/gvisor.git
synced 2026-05-22 17:12:49 -07:00
Jing ChenandgVisor bot
0a0f202662
Docker container and privileged container can be started w/ a limited number of capabilities from our experiment. PiperOrigin-RevId: 704601261
19 lines
421 B
YAML
19 lines
421 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: docker-in-gvisor
|
|
spec:
|
|
runtimeClassName: gvisor
|
|
containers:
|
|
- name: docker-in-gvisor
|
|
image: us-central1-docker.pkg.dev/gvisor-presubmit/gvisor-presubmit-images/basic/docker_x86_64:latest
|
|
securityContext:
|
|
capabilities:
|
|
add: ["all"]
|
|
volumeMounts:
|
|
- name: docker
|
|
mountPath: /var/lib/docker
|
|
volumes:
|
|
- name: docker
|
|
emptyDir: {}
|