From 956cef49fadd5010e6cbaee35c82ae476c8ff176 Mon Sep 17 00:00:00 2001
From: Mrunal Patel <mpatel@redhat.com>
Date: Fri, 7 Jul 2017 16:32:37 -0700
Subject: [PATCH] container: Add cgroup mount for introspection

Signed-off-by: Mrunal Patel <mpatel@redhat.com>
---
 server/container_create.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server/container_create.go b/server/container_create.go
index cc7c5d45..ccae4101 100644
--- a/server/container_create.go
+++ b/server/container_create.go
@@ -323,6 +323,9 @@ func (s *Server) createSandboxContainer(ctx context.Context, containerID string,
 		return nil, err
 	}
 
+	// Add cgroup mount so container process can introspect its own limits
+	specgen.AddCgroupsMount("ro")
+
 	if err := addDevices(sb, containerConfig, &specgen); err != nil {
 		return nil, err
 	}