Skip to content

Commit 27064b8

Browse files
Merge pull request #767 from wking/rfc2119-namespaces
config-linux: RFC 2119 tightening for namespaces
2 parents aa1631c + b644395 commit 27064b8

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

config-linux.md

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,11 +35,14 @@ The following parameters can be specified to setup namespaces:
3535
* **`user`** the container will be able to remap user and group IDs from the host to local users and groups within the container.
3636
* **`cgroup`** the container will have an isolated view of the cgroup hierarchy.
3737

38-
* **`path`** *(string, OPTIONAL)* - an absolute path to namespace file in the [runtime mount namespace](glossary.md#runtime-namespace)
38+
* **`path`** *(string, OPTIONAL)* - an absolute path to namespace file in the [runtime mount namespace](glossary.md#runtime-namespace).
39+
The runtime MUST place the container process in the namespace associated with that `path`.
40+
The runtime MUST [generate an error](runtime.md#errors) if `path` is not associated with a namespace of type `type`.
41+
42+
If `path` is not specified, the runtime MUST create a new [container namespace](glossary.md#container-namespace) of type `type`.
3943

40-
If a path is specified, that particular file is used to join that type of namespace.
4144
If a namespace type is not specified in the `namespaces` array, the container MUST inherit the [runtime namespace](glossary.md#runtime-namespace) of that type.
42-
If a `namespaces` field contains duplicated namespaces with same `type`, the runtime MUST error out.
45+
If a `namespaces` field contains duplicated namespaces with same `type`, the runtime MUST [generate an error](runtime.md#errors).
4346

4447
###### Example
4548

0 commit comments

Comments
 (0)