mirror of
https://github.com/kemko/nomad.git
synced 2026-01-07 10:55:42 +03:00
Changed the client options for docker volume selinux labels
This commit is contained in:
@@ -319,7 +319,7 @@ func (d *DockerDriver) containerBinds(alloc *allocdir.AllocDir, task *structs.Ta
|
||||
allocDirBind := fmt.Sprintf("%s:/%s", shared, allocdir.SharedAllocName)
|
||||
taskLocalBind := fmt.Sprintf("%s:/%s", local, allocdir.TaskLocal)
|
||||
|
||||
if selinuxLabel := d.config.Read("driver.docker.volumes.selinuxlabel"); selinuxLabel != "" {
|
||||
if selinuxLabel := d.config.Read("docker.volumes.selinuxlabel"); selinuxLabel != "" {
|
||||
allocDirBind = fmt.Sprintf("%s:%s", allocDirBind, selinuxLabel)
|
||||
taskLocalBind = fmt.Sprintf("%s:%s", taskLocalBind, selinuxLabel)
|
||||
}
|
||||
|
||||
@@ -352,9 +352,6 @@ documentation [here](/docs/drivers/index.html)
|
||||
* `consul.verifyssl`: This option enables SSL verification when the transport
|
||||
scheme for the Consul API client is `https`. This is set to true by default.
|
||||
|
||||
* `driver.docker.volumes.selinuxlabel`: Allows the operator to set a SELinux
|
||||
label to the allocation and task local bind-mounts to containers.
|
||||
|
||||
* `driver.whitelist`: A comma separated list of whitelisted drivers (e.g.
|
||||
"docker,qemu"). If specified, drivers not in the whitelist will be disabled.
|
||||
If the whitelist is empty, all drivers are fingerprinted and enabled where
|
||||
|
||||
@@ -289,6 +289,9 @@ options](/docs/agent/config.html#options):
|
||||
* `docker.cleanup.image` Defaults to `true`. Changing this to `false` will
|
||||
prevent Nomad from removing images from stopped tasks.
|
||||
|
||||
* `docker.volumes.selinuxlabel`: Allows the operator to set a SELinux
|
||||
label to the allocation and task local bind-mounts to containers.
|
||||
|
||||
* `docker.privileged.enabled` Defaults to `false`. Changing this to `true` will
|
||||
allow containers to use `privileged` mode, which gives the containers full
|
||||
access to the host's devices. Note that you must set a similar setting on the
|
||||
|
||||
Reference in New Issue
Block a user