diff options
author | Bruce Ashfield <bruce.ashfield@gmail.com> | 2021-02-06 11:56:25 -0500 |
---|---|---|
committer | Bruce Ashfield <bruce.ashfield@gmail.com> | 2021-02-06 11:56:25 -0500 |
commit | e2bba8633e7597eff578131891115875298aab40 (patch) | |
tree | 43937f622a254b8dd3be3bfdd2af69a57fa46cdc | |
parent | da32b79488aaadaf8780a274129f397670960614 (diff) | |
download | meta-virtualization-e2bba8633e7597eff578131891115875298aab40.tar.gz |
runc/config: add seccomp distro feature
When using podman (or other seccomp enabled container runtimes),
you will get an OCI container startup error if runc hasn't been
built with seccomp.
Adding a distro feature to runc and to the README to make it easier
to coordinate the support.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
-rw-r--r-- | README | 1 | ||||
-rw-r--r-- | recipes-containers/runc/runc.inc | 6 |
2 files changed, 6 insertions, 1 deletions
@@ -34,6 +34,7 @@ that may also be enabled: | |||
34 | - selinux: enables functionality in libvirt and lxc | 34 | - selinux: enables functionality in libvirt and lxc |
35 | - systemd: enable systemd services and unit files (for recipes for support) | 35 | - systemd: enable systemd services and unit files (for recipes for support) |
36 | - sysvinit: enable sysvinit scripts (for recipes with support) | 36 | - sysvinit: enable sysvinit scripts (for recipes with support) |
37 | - seccomp: enable seccomp support for packages that have the capability. | ||
37 | 38 | ||
38 | Dependencies | 39 | Dependencies |
39 | ------------ | 40 | ------------ |
diff --git a/recipes-containers/runc/runc.inc b/recipes-containers/runc/runc.inc index 41ea41be..5a6aeaf6 100644 --- a/recipes-containers/runc/runc.inc +++ b/recipes-containers/runc/runc.inc | |||
@@ -14,11 +14,15 @@ inherit go | |||
14 | inherit goarch | 14 | inherit goarch |
15 | inherit pkgconfig | 15 | inherit pkgconfig |
16 | 16 | ||
17 | PACKAGECONFIG ??= "static" | ||
18 | PACKAGECONFIG[seccomp] = "seccomp,,libseccomp" | 17 | PACKAGECONFIG[seccomp] = "seccomp,,libseccomp" |
19 | # This PACKAGECONFIG serves the purpose of whether building runc as static or not | 18 | # This PACKAGECONFIG serves the purpose of whether building runc as static or not |
20 | PACKAGECONFIG[static] = "" | 19 | PACKAGECONFIG[static] = "" |
21 | 20 | ||
21 | PACKAGECONFIG ??= "static \ | ||
22 | ${@bb.utils.contains('DISTRO_FEATURES', 'seccomp', 'seccomp', '', d)} \ | ||
23 | " | ||
24 | |||
25 | |||
22 | PROVIDES += "virtual/runc" | 26 | PROVIDES += "virtual/runc" |
23 | RPROVIDES_${PN} = "virtual/runc" | 27 | RPROVIDES_${PN} = "virtual/runc" |
24 | 28 | ||