Matthew Heon e4770b8289 Small updates to OCI spec generation ...

Firstly, when adding the privileged catch-all resource device,
first remove the spec's default catch-all resource device.

Second, remove our default rootfs propogation config - Docker
does not set this by default, so I don't think we should either.

Signed-off-by: Matthew Heon <matthew.heon@gmail.com>

Closes: #1491
Approved by: TomSweeneyRedHat

2018-09-17 22:13:42 +00:00

..

annotations

Spell check strings and comments

2018-05-25 08:45:15 +00:00

apparmor

pkg/apparmor: use a pipe instead of a tmp file

2018-08-14 14:25:14 +00:00

chrootuser

changes to allow for darwin compilation

2018-06-29 20:44:09 +00:00

ctime

ctime: Drop 32-/64-bit distinction on Linux

2018-07-07 20:35:00 +00:00

firewall

Replace existing iptables handler with firewall code

2018-09-10 18:53:27 +00:00

hooks

Change references to cri-o to point at new repository

2018-09-07 17:47:45 +00:00

inspect

Reveal information about container capabilities

2018-08-24 12:16:19 +00:00

kubeutils

Remove dependency on kubernetes

2018-03-27 21:55:33 +00:00

logs

Add CRI logs parsing to podman logs

2018-09-05 13:48:20 +00:00

namespaces

Fix pod sharing for utsmode

2018-09-07 18:18:54 +00:00

netns

Fix godoc comment in pkg/netns

2018-07-27 02:48:16 +00:00

registrar

Initial checkin from CRI-O repo

2017-11-01 11:24:59 -04:00

registries

switch projectatomic to containers

2018-08-16 17:12:36 +00:00

rootless

rootless: check uid with Geteuid() instead of Getuid()

2018-09-04 14:36:57 +00:00

secrets

Swap default mount propagation from private to rprivate

2018-09-13 21:35:44 +00:00

spec

Small updates to OCI spec generation

2018-09-17 22:13:42 +00:00

util

podman: provide a default UID mapping when non root

2018-06-15 14:53:18 +00:00

varlinkapi

Merge pull request #1474 from baude/varlinkinforegistries

2018-09-14 16:53:53 -04:00