moby/oci
Cory Snider 210c4d6f4b
daemon: ensure OCI options play nicely together
Audit the OCI spec options used for Linux containers to ensure they are
less order-dependent. Ensure they don't assume that any pointer fields
are non-nil and that they don't unintentionally clobber mutations to the
spec applied by other options.

Signed-off-by: Cory Snider <csnider@mirantis.com>
(cherry picked from commit 8a094fe609)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2023-06-21 22:16:28 +02:00
..
caps oci/caps: limit available capabilities to current environment 2021-10-15 16:12:26 +02:00
fixtures Fix permissions on oci fixtures files 2020-11-27 10:29:47 +07:00
defaults.go pkg/system: deprecate DefaultPathEnv, move to oci 2022-11-29 17:02:50 +01:00
devices_linux.go oci: use filepath.WalkDir instead of filepath.Walk 2022-10-09 17:21:04 +02:00
fuzz_test.go testing: move fuzzers over from OSS-Fuzz 2022-11-30 17:31:03 +01:00
namespaces.go daemon: ensure OCI options play nicely together 2023-06-21 22:16:28 +02:00
oci.go daemon: ensure OCI options play nicely together 2023-06-21 22:16:28 +02:00
oci_test.go Fix daemon panic when starting container with invalid device cgroup rule 2021-01-22 16:02:19 +01:00
seccomp_test.go refactor: move from io/ioutil to io and os package 2021-08-27 14:56:57 +08:00