mirror of
https://github.com/opencontainers/runtime-spec.git
synced 2026-02-05 09:45:57 +01:00
This uses FreeBSD jails to implement container isolation. Signed-off-by: Doug Rabson <dfr@rabson.org>
91 lines
3.3 KiB
JSON
91 lines
3.3 KiB
JSON
{
|
|
"freebsd": {
|
|
"description": "FreeBSD platform-specific configurations",
|
|
"type": "object",
|
|
"properties": {
|
|
"devices": {
|
|
"type": "array",
|
|
"items": {
|
|
"$ref": "defs-freebsd.json#/definitions/Device"
|
|
}
|
|
},
|
|
"jail": {
|
|
"type": "object",
|
|
"properties": {
|
|
"parent": {
|
|
"type": "string"
|
|
},
|
|
"host": {
|
|
"$ref": "defs-freebsd.json#/definitions/SharingModeNoDisable"
|
|
},
|
|
"ip4": {
|
|
"$ref": "defs-freebsd.json#/definitions/SharingMode"
|
|
},
|
|
"ip4Addr": {
|
|
"$ref": "defs.json#/definitions/ArrayOfStrings"
|
|
},
|
|
"ip6": {
|
|
"$ref": "defs-freebsd.json#/definitions/SharingMode"
|
|
},
|
|
"ip6Addr": {
|
|
"$ref": "defs.json#/definitions/ArrayOfStrings"
|
|
},
|
|
"vnet": {
|
|
"$ref": "defs-freebsd.json#/definitions/SharingModeNoDisable"
|
|
},
|
|
"interface": {
|
|
"type": "string"
|
|
},
|
|
"vnetInterfaces": {
|
|
"$ref": "defs.json#/definitions/ArrayOfStrings"
|
|
},
|
|
"sysvmsg": {
|
|
"$ref": "defs-freebsd.json#/definitions/SharingMode"
|
|
},
|
|
"sysvsem": {
|
|
"$ref": "defs-freebsd.json#/definitions/SharingMode"
|
|
},
|
|
"sysvshm": {
|
|
"$ref": "defs-freebsd.json#/definitions/SharingMode"
|
|
},
|
|
"enforceStatfs": {
|
|
"$ref": "defs.json#/definitions/uint8"
|
|
},
|
|
"allow": {
|
|
"type": "object",
|
|
"properties": {
|
|
"setHostname": {
|
|
"type": "boolean"
|
|
},
|
|
"rawSockets": {
|
|
"type": "boolean"
|
|
},
|
|
"chflags": {
|
|
"type": "boolean"
|
|
},
|
|
"mount": {
|
|
"$ref": "defs.json#/definitions/ArrayOfStrings"
|
|
},
|
|
"quotas": {
|
|
"type": "boolean"
|
|
},
|
|
"socketAf": {
|
|
"type": "boolean"
|
|
},
|
|
"mlock": {
|
|
"type": "boolean"
|
|
},
|
|
"reservedPorts": {
|
|
"type": "boolean"
|
|
},
|
|
"suser": {
|
|
"type": "boolean"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|