Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

podman pod create needs to support --security-opt #12173

Closed
rhatdan opened this issue Nov 4, 2021 · 1 comment · Fixed by #12208
Closed

podman pod create needs to support --security-opt #12173

rhatdan opened this issue Nov 4, 2021 · 1 comment · Fixed by #12208
Assignees
@cdoern
Labels
locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.

Comments

@rhatdan
Copy link
Member

rhatdan commented Nov 4, 2021

We need to be able to disable SELinux, Seccomp, apparmor support for a POD,especially if volumes are being leaked into the pod.
@cdoern cdoern mentioned this issue Nov 8, 2021
Merged
@github-actions
Copy link

github-actions bot commented Dec 5, 2021

A friendly reminder that this issue had no activity for 30 days.

@cdoern cdoern removed the stale-issue label Dec 8, 2021
cdoern added a commit to cdoern/podman that referenced this issue Dec 27, 2021
@cdoern
Pod Security Option support
2892703 
Added support for pod security options. These are applied to infra and passed down to the
containers as added (unless overridden).

Modified the inheritance process from infra, creating a new function Inherit() which reads the config, and marshals the compatible options into an intermediate struct `InfraInherit`
This is then unmarshaled into a container config and all of this is added to the CtrCreateOptions. Removes the need (mostly) for special additons which complicate the Container_create
code and pod creation.

resolves containers#12173

Signed-off-by: cdoern <cdoern@redhat.com>
@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Sep 21, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Sep 21, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@cdoern cdoern

Labels
locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Pod Security Option support and Infra Inheritance changes cdoern/podman
2 participants
@rhatdan @cdoern