mirror of
https://github.com/docker/docs.git
synced 2026-03-27 14:28:47 +07:00
vendor: github.com/docker/cli v26.1.2
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
This commit is contained in:
@@ -2331,6 +2331,7 @@ examples: |-
|
||||
| `--security-opt="seccomp=unconfined"` | Turn off seccomp confinement for the container |
|
||||
| `--security-opt="seccomp=builtin"` | Use the default (built-in) seccomp profile for the container. This can be used to enable seccomp for a container running on a daemon with a custom default profile set, or with seccomp disabled ("unconfined"). |
|
||||
| `--security-opt="seccomp=profile.json"` | White-listed syscalls seccomp Json file to be used as a seccomp filter |
|
||||
| `--security-opt="systempaths=unconfined"` | Turn off confinement for system paths (masked paths, read-only paths) for the container |
|
||||
|
||||
The `--security-opt` flag lets you override the default labeling scheme for a
|
||||
container. Specifying the level in the following command allows you to share
|
||||
|
||||
@@ -270,6 +270,12 @@ examples: |-
|
||||
|
||||
If unspecified, the IP address or interface of the advertise address is used.
|
||||
|
||||
Setting `--data-path-addr` does not restrict which interfaces or source IP
|
||||
addresses the VXLAN socket is bound to. Similar to `--advertise-addr`, the
|
||||
purpose of this flag is to inform other members of the swarm about which
|
||||
address to use for control plane traffic. To restrict access to the VXLAN port
|
||||
of the node, use firewall rules.
|
||||
|
||||
### Configure port number for data traffic (--data-path-port) {#data-path-port}
|
||||
|
||||
The `--data-path-port` flag allows you to configure the UDP port number to use
|
||||
|
||||
Reference in New Issue
Block a user