You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add support for --add-caps and --drop-caps to modify the capabilities
of the container process.
When the container user is root, these modify the
permitted/effective/bounding sets.
When the container user is non-root, the bounding set is modified, and
any explicit add-caps are added to the
permitted/effective/inheritable/ambient sets.
Fixex sylabs#1467
dtrudg
changed the title
Additional support for flags/options in --oci mode
Additional support for flags/options in --oci mode (4.0 features)
Jul 26, 2023
Continuing from #598, for Singularity 4.0 we wish to support all practical flags / options that are available with the native runtime in
--oci
mode.--add-caps / --drop-caps
in--oci
mode #1468--allow-setuid
in--oci
mode #1469--bind
of images in--oci
mode (bare) #1471resolv.conf
and--dns
in--oci
mode #1472--home
in--oci
mode #1473--hostname
in--oci
mode #1474--keep-privs
in--oci
mode #1475--no-privs
in--oci
mode #1477--overlay
in--oci
mode (directory) #1478--overlay
in--oci
mode (bare image) (ro) #1479--pwd
in--oci
mode #1481--scratch
in--oci
mode #1482--workdir
in--oci
mode #1483--writable-tmpfs
for--oci
mode #1621--no-home
in--oci
mode #1780--no-mount
in--oci
mode #1781--containlibs
in--oci
mode (hidden) #1782The text was updated successfully, but these errors were encountered: