vbatts/cri-o
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

container_create: set the seccomp profile in the container object

Browse source 
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
This commit is contained in:
Antonio Murdaca 2017-11-12 17:51:32 +01:00
parent edf2300205
commit 586eda8245
No known key found for this signature in database
GPG key ID: B2BEAD150DE936B9
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
server/container_create.go
View file

@ -1066,7 +1066,6 @@ func (s *Server) createSandboxContainer(ctx context.Context, containerID string,
} }
} }
specgen.AddAnnotation(annotations.SeccompProfilePath, spp) specgen.AddAnnotation(annotations.SeccompProfilePath, spp)
// TODO(runcom): add spp to container...
metaname := metadata.Name metaname := metadata.Name
attempt := metadata.Attempt attempt := metadata.Attempt
@ -1213,6 +1212,7 @@ func (s *Server) createSandboxContainer(ctx context.Context, containerID string,
} }
container.SetSpec(specgen.Spec()) container.SetSpec(specgen.Spec())
container.SetMountPoint(mountPoint) container.SetMountPoint(mountPoint)
container.SetSeccompProfilePath(spp)
for _, cv := range containerVolumes { for _, cv := range containerVolumes {
container.AddVolume(cv) container.AddVolume(cv)