29 lines
1.0 KiB
Go
29 lines
1.0 KiB
Go
|
package mount
|
||
|
|
|
||
|
|
import (
|
||
|
|
"errors"
|
||
|
|
||
|
|
"github.com/docker/libcontainer/devices"
|
||
|
|
)
|
||
|
|
|
||
|
|
var ErrUnsupported = errors.New("Unsupported method")
|
||
|
|
|
||
|
|
type MountConfig struct {
|
||
|
|
// NoPivotRoot will use MS_MOVE and a chroot to jail the process into the container's rootfs
|
||
|
|
// This is a common option when the container is running in ramdisk
|
||
|
|
NoPivotRoot bool `json:"no_pivot_root,omitempty"`
|
||
|
|
|
||
|
|
// ReadonlyFs will remount the container's rootfs as readonly where only externally mounted
|
||
|
|
// bind mounts are writtable
|
||
|
|
ReadonlyFs bool `json:"readonly_fs,omitempty"`
|
||
|
|
|
||
|
|
// Mounts specify additional source and destination paths that will be mounted inside the container's
|
||
|
|
// rootfs and mount namespace if specified
|
||
|
|
Mounts []*Mount `json:"mounts,omitempty"`
|
||
|
|
|
||
|
|
// The device nodes that should be automatically created within the container upon container start. Note, make sure that the node is marked as allowed in the cgroup as well!
|
||
|
|
DeviceNodes []*devices.Device `json:"device_nodes,omitempty"`
|
||
|
|
|
||
|
|
MountLabel string `json:"mount_label,omitempty"`
|
||
|
|
}
|