mirror of
https://github.com/moby/moby.git
synced 2025-12-13 22:02:25 +03:00
fdf7457683
Added cap-drop and cap-add in lxc template Docker-DCO-1.1-Signed-off-by: Abin Shahab <ashahab@altiscale.com> (github: ashahab-altiscale)
24 lines
416 B
Go
24 lines
416 B
Go
package lxc
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/docker/libcontainer/namespaces"
|
|
"github.com/docker/libcontainer/utils"
|
|
)
|
|
|
|
func finalizeNamespace(args *InitArgs) error {
|
|
if err := utils.CloseExecFrom(3); err != nil {
|
|
return err
|
|
}
|
|
|
|
if err := namespaces.SetupUser(args.User); err != nil {
|
|
return fmt.Errorf("setup user %s", err)
|
|
}
|
|
|
|
if err := setupWorkingDirectory(args); err != nil {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|