-
Notifications
You must be signed in to change notification settings - Fork 107
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
This command provides functionality to pull security profiles from OCI registries, for example: ``` > ./spoc pull quay.io/saschagrunert/runc 2023/03/16 16:48:21 Pulling profile from: quay.io/saschagrunert/runc 2023/03/16 16:48:22 Got SeccompProfile: runc-v1.1.4 2023/03/16 16:48:22 Saving profile in: /tmp/profile.yaml ``` Which successfully pulls the image into the local directory: ``` > cat /tmp/profile.yaml | head --- apiVersion: security-profiles-operator.x-k8s.io/v1beta1 kind: SeccompProfile metadata: name: runc-v1.1.4 spec: defaultAction: SCMP_ACT_ERRNO architectures: - SCMP_ARCH_X86_64 syscalls: ``` Images have to be build to contain a single profile.yaml, resulting in a single layer. For example like this: ```Dockerfile FROM scratch COPY profile.yaml / ``` Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
- Loading branch information
1 parent
687dcfb
commit c282dc8
Showing
251 changed files
with
47,075 additions
and
242 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.