@@ -250,152 +250,167 @@ Here is a full example `config.json` for reference.
250250
251251``` json
252252{
253- "ociVersion" : " 0.3.0"
254- "platform" : {
255- "os" : " linux"
256- "arch" : " amd64"
257- },
258- "process" : {
259- "terminal" : true ,
260- "user" : {
261- "uid" : 1 ,
262- "gid" : 1 ,
263- "additionalGids" : [5 , 6 ]
264- },
265- "args" : [
266- " sh"
267- ],
268- "env" : [
269- " PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
270- " TERM=xterm"
271- ],
272- "cwd" : " /"
273- "capabilities" : [
274- " CAP_AUDIT_WRITE"
275- " CAP_KILL"
276- " CAP_NET_BIND_SERVICE"
277- ],
278- "apparmorProfile" : " "
279- "selinuxLabel" : " "
280- },
281- "root" : {
282- "path" : " rootfs"
283- "readonly" : true
284- },
285- "hostname" : " slartibartfast"
286- "mounts" : [
287- {
288- "destination" : " /proc"
289- "type" : " proc"
290- "source" : " proc"
291- },
292- {
293- "destination" : " /dev"
294- "type" : " tmpfs"
295- "source" : " tmpfs"
296- "options" : [
297- " nosuid"
298- " strictatime"
299- " mode=755"
300- " size=65536k"
301- ]
302- },
303- {
304- "destination" : " /dev/pts"
305- "type" : " devpts"
306- "source" : " devpts"
307- "options" : [
308- " nosuid"
309- " noexec"
310- " newinstance"
311- " ptmxmode=0666"
312- " mode=0620"
313- " gid=5"
314- ]
315- },
316- {
317- "destination" : " /dev/shm"
318- "type" : " tmpfs"
319- "source" : " shm"
320- "options" : [
321- " nosuid"
322- " noexec"
323- " nodev"
324- " mode=1777"
325- " size=65536k"
326- ]
327- },
328- {
329- "destination" : " /dev/mqueue"
330- "type" : " mqueue"
331- "source" : " mqueue"
332- "options" : [
333- " nosuid"
334- " noexec"
335- " nodev"
336- ]
337- },
338- {
339- "destination" : " /sys"
340- "type" : " sysfs"
341- "source" : " sysfs"
342- "options" : [
343- " nosuid"
344- " noexec"
345- " nodev"
346- ]
347- },
348- {
349- "destination" : " /sys/fs/cgroup"
350- "type" : " cgroup"
351- "source" : " cgroup"
352- "options" : [
353- " nosuid"
354- " noexec"
355- " nodev"
356- " relatime"
357- " ro"
358- ]
359- }
360- ],
361- "hooks" : {
362- "prestart" : [
363- {
364- "path" : " /"
365- "args" : [" /usr/bin/uptime"
366- "env" : []
367- }
368- ]
369- },
370- "linux" : {
371- "rlimits" : [
372- {
373- "type" : " RLIMIT_NOFILE"
374- "hard" : 1024 ,
375- "soft" : 1024
376- }
377- ],
378- "resources" : {
379- "devices" : [
380- {
381- "allow" : false ,
382- "access" : " rwm"
383- }
384- ]
385- },
386- "namespaces" : [
387- { "type" : " pid"
388- { "type" : " network"
389- { "type" : " ipc"
390- { "type" : " uts"
391- { "type" : " mount"
392- ],
393- "devices" : null ,
394- "seccomp" : {
395- "defaultAction" : " "
396- "architectures" : null
397- }
398- }
253+ "ociVersion" : " 0.3.0"
254+ "platform" : {
255+ "os" : " linux"
256+ "arch" : " amd64"
257+ },
258+ "process" : {
259+ "terminal" : true ,
260+ "user" : {
261+ "uid" : 1 ,
262+ "gid" : 1 ,
263+ "additionalGids" : [
264+ 5 ,
265+ 6
266+ ]
267+ },
268+ "args" : [
269+ " sh"
270+ ],
271+ "env" : [
272+ " PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
273+ " TERM=xterm"
274+ ],
275+ "cwd" : " /"
276+ "capabilities" : [
277+ " CAP_AUDIT_WRITE"
278+ " CAP_KILL"
279+ " CAP_NET_BIND_SERVICE"
280+ ],
281+ "apparmorProfile" : " "
282+ "selinuxLabel" : " "
283+ },
284+ "root" : {
285+ "path" : " rootfs"
286+ "readonly" : true
287+ },
288+ "hostname" : " slartibartfast"
289+ "mounts" : [
290+ {
291+ "destination" : " /proc"
292+ "type" : " proc"
293+ "source" : " proc"
294+ },
295+ {
296+ "destination" : " /dev"
297+ "type" : " tmpfs"
298+ "source" : " tmpfs"
299+ "options" : [
300+ " nosuid"
301+ " strictatime"
302+ " mode=755"
303+ " size=65536k"
304+ ]
305+ },
306+ {
307+ "destination" : " /dev/pts"
308+ "type" : " devpts"
309+ "source" : " devpts"
310+ "options" : [
311+ " nosuid"
312+ " noexec"
313+ " newinstance"
314+ " ptmxmode=0666"
315+ " mode=0620"
316+ " gid=5"
317+ ]
318+ },
319+ {
320+ "destination" : " /dev/shm"
321+ "type" : " tmpfs"
322+ "source" : " shm"
323+ "options" : [
324+ " nosuid"
325+ " noexec"
326+ " nodev"
327+ " mode=1777"
328+ " size=65536k"
329+ ]
330+ },
331+ {
332+ "destination" : " /dev/mqueue"
333+ "type" : " mqueue"
334+ "source" : " mqueue"
335+ "options" : [
336+ " nosuid"
337+ " noexec"
338+ " nodev"
339+ ]
340+ },
341+ {
342+ "destination" : " /sys"
343+ "type" : " sysfs"
344+ "source" : " sysfs"
345+ "options" : [
346+ " nosuid"
347+ " noexec"
348+ " nodev"
349+ ]
350+ },
351+ {
352+ "destination" : " /sys/fs/cgroup"
353+ "type" : " cgroup"
354+ "source" : " cgroup"
355+ "options" : [
356+ " nosuid"
357+ " noexec"
358+ " nodev"
359+ " relatime"
360+ " ro"
361+ ]
362+ }
363+ ],
364+ "hooks" : {
365+ "prestart" : [
366+ {
367+ "path" : " /usr/bin/uptime"
368+ "args" : [
369+ " /usr/bin/uptime"
370+ ],
371+ "env" : []
372+ }
373+ ]
374+ },
375+ "linux" : {
376+ "rlimits" : [
377+ {
378+ "type" : " RLIMIT_NOFILE"
379+ "hard" : 1024 ,
380+ "soft" : 1024
381+ }
382+ ],
383+ "resources" : {
384+ "devices" : [
385+ {
386+ "allow" : false ,
387+ "access" : " rwm"
388+ }
389+ ]
390+ },
391+ "namespaces" : [
392+ {
393+ "type" : " pid"
394+ },
395+ {
396+ "type" : " network"
397+ },
398+ {
399+ "type" : " ipc"
400+ },
401+ {
402+ "type" : " uts"
403+ },
404+ {
405+ "type" : " mount"
406+ }
407+ ],
408+ "devices" : null ,
409+ "seccomp" : {
410+ "defaultAction" : " "
411+ "architectures" : null
412+ }
413+ }
399414}
400415```
401416
0 commit comments