From 8850db961d60c0152b6db31f3bc246e198484315 Mon Sep 17 00:00:00 2001 From: Daniel J Walsh Date: Fri, 13 Jan 2023 17:02:43 -0500 Subject: [PATCH] Allow --device-cgroup-rule to be passed in by docker API This looks like the correct fix, but I have no idea how to test. Fixes: https://github.com/containers/podman/issues/17106 [NO NEW TESTS NEEDED] Will have reporter verify if this fixes the problem. Signed-off-by: Daniel J Walsh --- pkg/api/handlers/compat/containers_create.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/api/handlers/compat/containers_create.go b/pkg/api/handlers/compat/containers_create.go index 8d12afd729..811305341c 100644 --- a/pkg/api/handlers/compat/containers_create.go +++ b/pkg/api/handlers/compat/containers_create.go @@ -392,7 +392,7 @@ func cliOpts(cc handlers.CreateContainerConfig, rtc *config.Config) (*entities.C // Detach: false, // don't need // DetachKeys: "", // don't need Devices: devices, - DeviceCgroupRule: nil, + DeviceCgroupRule: cc.HostConfig.DeviceCgroupRules, DeviceReadBPs: readBps, DeviceReadIOPs: readIops, DeviceWriteBPs: writeBps,