From ed9d49f247f7348e081ab788deb4e14929dfcf1d Mon Sep 17 00:00:00 2001
From: Mrunal Patel <mpatel@redhat.com>
Date: Fri, 7 Jul 2017 16:32:37 -0700
Subject: [PATCH] container: Add cgroup mount for introspection

Signed-off-by: Mrunal Patel <mpatel@redhat.com>
---
 server/container_create.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/server/container_create.go b/server/container_create.go
index be0e4987..d2136a0c 100644
--- a/server/container_create.go
+++ b/server/container_create.go
@@ -324,6 +324,9 @@ func (s *Server) createSandboxContainer(ctx context.Context, containerID string,
 		return nil, err
 	}
 
+	// Add cgroup mount so container process can introspect its own limits
+	specgen.AddCgroupsMount("ro")
+
 	if err := addDevices(sb, containerConfig, &specgen); err != nil {
 		return nil, err
 	}