You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: config.md
+10-9Lines changed: 10 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -78,7 +78,8 @@ For all platform-specific configuration values, the scope defined below in the [
78
78
* Windows: a local directory on the filesystem of the container host. UNC paths and mapped drives are not supported.
79
79
* Solaris: corresponds to "special" of the fs resource in [zonecfg(1M)][zonecfg.1m].
80
80
***`options`** (array of strings, OPTIONAL) Mount options of the filesystem to be used.
81
-
* Linux: supported options are listed in the [mount(8)][mount.8] man page. Note both [filesystem-independent][mount.8-filesystem-independent] and [filesystem-specific][mount.8-filesystem-specific] options are listed.
81
+
* Linux: supported options are listed in the [mount(8)][mount.8] man page.
82
+
Note both [filesystem-independent][mount.8-filesystem-independent] and [filesystem-specific][mount.8-filesystem-specific] options are listed.
82
83
* Solaris: corresponds to "options" of the fs resource in [zonecfg(1M)][zonecfg.1m].
83
84
84
85
### Example (Linux)
@@ -149,7 +150,7 @@ For all platform-specific configuration values, the scope defined below in the [
149
150
Valid values are platform-specific.
150
151
For example, valid values for Linux are defined in the [capabilities(7)][capabilities.7] man page, such as `CAP_CHOWN`.
151
152
Any value which cannot be mapped to a relevant kernel interface MUST cause an error.
152
-
capabilities contains the following properties:
153
+
`capabilities` contains the following properties:
153
154
***`effective`** (array of strings, OPTIONAL) - the `effective` field is an array of effective capabilities that are kept for the process.
154
155
***`bounding`** (array of strings, OPTIONAL) - the `bounding` field is an array of bounding capabilities that are kept for the process.
155
156
***`inheritable`** (array of strings, OPTIONAL) - the `inheritable` field is an array of inheritable capabilities that are kept for the process.
@@ -191,7 +192,7 @@ For Linux and Solaris based systems the user structure has the following fields:
191
192
192
193
***`uid`** (int, REQUIRED) specifies the user ID in the [container namespace](glossary.md#container-namespace).
193
194
***`gid`** (int, REQUIRED) specifies the group ID in the [container namespace](glossary.md#container-namespace).
194
-
***`additionalGids`** (array of ints, OPTIONAL) specifies additional group IDs (in the [container namespace](glossary.md#container-namespace) to be added to the process.
195
+
***`additionalGids`** (array of ints, OPTIONAL) specifies additional group IDs in the [container namespace](glossary.md#container-namespace) to be added to the process.
195
196
196
197
_Note: symbolic name for uid and gid, such as uname and gname respectively, are left to upper levels to derive (i.e. `/etc/passwd` parsing, NSS, etc)_
197
198
@@ -319,13 +320,13 @@ For Windows based systems the user structure has the following fields:
319
320
320
321
**`platform`** (object, REQUIRED) specifies the configuration's target platform.
321
322
322
-
***`os`** (string, REQUIRED) specifies the operating system family of the container configuration's specified [`root`](#root)file system bundle.
323
+
***`os`** (string, REQUIRED) specifies the operating system family of the container configuration's specified [`root`](#root)filesystem bundle.
323
324
The runtime MUST generate an error if it does not support the specified **`os`**.
324
-
Bundles SHOULD use, and runtimes SHOULD understand, **`os`** entries listed in the Go Language document for [`GOOS`][go-environment].
325
+
Values SHOULD be, and runtimes SHOULD understand, **`os`** entries listed in the Go Language document for [`GOOS`][go-environment].
325
326
If an operating system is not included in the `GOOS` documentation, it SHOULD be submitted to this specification for standardization.
326
-
***`arch`** (string, REQUIRED) specifies the instruction set for which the binaries in the specified [`root`](#root)file system bundle have been compiled.
327
+
***`arch`** (string, REQUIRED) specifies the instruction set for which the binaries in the specified [`root`](#root)filesystem bundle have been compiled.
327
328
The runtime MUST generate an error if it does not support the specified **`arch`**.
328
-
Values for **`arch`**SHOULD use, and runtimes SHOULD understand, **`arch`** entries listed in the Go Language document for [`GOARCH`][go-environment].
329
+
Values SHOULD be, and runtimes SHOULD understand, **`arch`** entries listed in the Go Language document for [`GOARCH`][go-environment].
329
330
If an architecture is not included in the `GOARCH` documentation, it SHOULD be submitted to this specification for standardization.
330
331
331
332
### Example
@@ -456,12 +457,12 @@ Cleanup or debugging functions are examples of such a hook.
456
457
457
458
## <aname="configExtensibility" />Extensibility
458
459
459
-
Implementations that are reading/processing this configuration file MUST NOT generate an error if they encounter an unknown property.
460
+
Runtimes that are reading or processing this configuration file MUST NOT generate an error if they encounter an unknown property.
460
461
Instead they MUST ignore unknown properties.
461
462
462
463
## Valid values
463
464
464
-
Implementations that are reading/processing this configuration file MUST generate an error when invalid or unsupported values are encountered.
465
+
Runtimes that are reading or processing this configuration file MUST generate an error when invalid or unsupported values are encountered.
465
466
Unless support for a valid value is explicitly required, runtimes MAY choose which subset of the valid values it will support.
0 commit comments