docker-docs

mirror of https://github.com/docker/docs.git synced 2026-04-01 00:38:52 +07:00

Files

Eric Windisch 5400d8873f Make /proc, /sys, /dev readonly for readonly containers

If a container is read-only, also set /proc, /sys,
& /dev to read-only. This should apply to both privileged and
unprivileged containers.

Note that when /dev is read-only, device files may still be
written to. This change will simply prevent the device paths
from being modified, or performing mknod of new devices within
the /dev path.

Tests are included for all cases. Also adds a test to ensure
that /dev/pts is always mounted read/write, even in the case of a
read-write rootfs. The kernel restricts writes here naturally and
bad things will happen if we mount it ro.

Signed-off-by: Eric Windisch <eric@windisch.us>

2015-07-02 19:08:00 +00:00

execdrivers

Windows: NewDriver() re-baseline parms

2015-05-16 11:38:19 -07:00

lxc

Replace latest log by logrus

2015-07-02 16:11:52 +02:00

native

Make /proc, /sys, /dev readonly for readonly containers

2015-07-02 19:08:00 +00:00

windows

Windows: Empty Windows Exec Driver