History

Nalin Dahyabhai 0f7852ef9b pkg/manifests.List: add SetSubject()/Subject() Add methods for reading and writing the index-level "subject" field. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>		2024-02-05 09:36:48 -05:00
..
.github	Fix staticcheck issues; show all lint issues in CI	2024-01-05 21:39:45 +02:00
cmd/seccomp	chore: remove outdated build constraints	2024-01-03 22:56:00 +02:00
docs	pkg/config: read user local config also as root	2024-01-29 16:28:07 +01:00
hack	CI: check for possible diff after make vendor	2023-07-12 14:21:24 +02:00
internal	pkg/manifests.List: add SetSubject()/Subject()	2024-02-05 09:36:48 -05:00
libimage	Check if node layer nil inside for loop to ensure full parent tree is traversed	2024-01-26 17:06:59 +00:00
libnetwork	Gate CNI support behind the `cni` build tag	2024-01-30 09:18:31 +01:00
logos	Sizing adjustment to youki logo	2023-04-05 14:19:53 -04:00
pkg	pkg/manifests.List: add SetSubject()/Subject()	2024-02-05 09:36:48 -05:00
tests	…
tools	…
vendor	fix(deps): update module github.com/docker/docker to v25.0.2+incompatible	2024-02-01 12:37:22 +00:00
version	bump to 0.58.0-dev	2023-12-06 15:11:02 +01:00
.cirrus.yml	chore(deps): update dependency containers/automation_images to v20240102	2024-01-16 22:15:22 +00:00
.codespelldict	Fix typos across repo; extend codespell config	2024-01-03 23:38:47 +02:00
.codespellrc	Fix typos across repo; extend codespell config	2024-01-03 23:38:47 +02:00
.gitignore	libnetwork/netavark: add test plugin	2023-04-04 18:20:18 +02:00
.golangci-extra.yml	CI: enable extra linters for new code	2022-05-16 19:54:38 -07:00
.golangci.yml	Gate CNI support behind the `cni` build tag	2024-01-30 09:18:31 +01:00
CODE-OF-CONDUCT.md	Add list members emails to the CoC	2023-09-28 14:25:17 -04:00
CONTRIBUTING.md	…
LICENSE	…
Makefile	Gate CNI support behind the `cni` build tag	2024-01-30 09:18:31 +01:00
OWNERS	OWNERS: add @mtrmac	2022-05-19 17:30:17 +02:00
README.md	…
SECURITY.md	…
go.mod	fix(deps): update module github.com/docker/docker to v25.0.2+incompatible	2024-02-01 12:37:22 +00:00
go.sum	fix(deps): update module github.com/docker/docker to v25.0.2+incompatible	2024-02-01 12:37:22 +00:00

README.md

containers/common

Location for shared common files and common go code to manage those files in github.com/containers repos.

The common files to one or more projects in the containers group will be kept in this repository.

It will be up to the individual projects to include the files from this repository.

seccomp

The seccomp package in pkg/seccomp is a set of Go libraries used by container runtimes to generate and load seccomp mappings into the kernel.

seccomp (short for secure computing mode) is a BPF based syscall filter language and present a more conventional function-call based filtering interface that should be familiar to, and easily adopted by, application developers.

Building the seccomp.json file

The make target make seccomp.json generates the seccomp.json file, which contains the allowed list of syscalls that can be used by container runtime engines like CRI-O, Buildah, Podman and Docker, and container runtimes like OCI Runc to control the syscalls available to containers.

Supported build tags

pkg/apparmor: apparmor, linux
pkg/seccomp: seccomp
pkg/config: darwin, remote, linux, systemd
pkg/sysinfo: linux, solaris, windows, cgo
pkg/cgroupv2: linux

Contributing

When developing this library, please use make (or make … BUILDTAGS=…) to take advantage of the tests and validation.

Contact

IRC: #containers on freenode.net