chroot/seccomp_unsupported.go


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

//go:build (!linux && !freebsd) || !seccomp
// +build !linux,!freebsd !seccomp

package chroot

import (
	"errors"

	"github.com/opencontainers/runtime-spec/specs-go"
)

const seccompAvailable = false

func setSeccomp(spec *specs.Spec) error {
	if spec.Linux.Seccomp != nil {
		return errors.New("configured a seccomp filter without seccomp support?")
	}
	return nil
}

func setupSeccomp(spec *specs.Spec, seccompProfilePath string) error {
	if spec.Linux != nil {
		// runtime-tools may have supplied us with a default filter
		spec.Linux.Seccomp = nil
	}
	return nil
}