1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
|
{
"ociVersion": "1.0.0",
"root": {
"path": "rootfs",
"readonly": true
},
"process": {
"terminal": false,
"consoleSize": {
"height":6667,
"width":6668
},
"user": {
"uid": 14,
"gid": 14,
"additionalGids": [59, 81]
},
"args": [
"/tmp/verify.sh"
],
"env": [
"FOO=BAR",
"WITHSPACES=FOO BAR",
"WITHSHELLCHARS=$ASDF \\\"asdf asdf\\\" !",
"WITHCONTROLCHARS=\\123\\125\\010\\020",
"TERM=xterm"
],
"cwd": "/tmp/src",
"rlimits": [
{
"type": "RLIMIT_NOFILE",
"hard": 1020,
"soft": 1020
}
]
},
"mounts": [
{
"destination": "/tmp/src",
"source": "src",
"options": ["ro"]
},
{
"destination": "/tmp/verify.sh",
"source": "verify.sh",
"options": ["ro"]
},
{
"destination": "/proc",
"type": "proc",
"source": "proc"
},
{
"destination": "/dev",
"type": "tmpfs",
"source": "tmpfs",
"options": [
"mode=777"
]
},
{
"destination": "/dev/pts",
"type": "devpts",
"source": "devpts",
"options": [
"mode=777"
]
},
{
"destination": "/dev/shm",
"type": "tmpfs",
"source": "shm",
"options": [
"mode=777"
]
},
{
"destination": "/dev/mqueue",
"type": "mqueue",
"source": "mqueue",
"options": [
"mode=777"
]
},
{
"destination": "/sys",
"type": "sysfs",
"source": "sysfs",
"options": [
"mode=777"
]
},
{
"destination": "/sys/fs/cgroup",
"type": "cgroup",
"source": "cgroup",
"options": [
"mode=777"
]
}
],
"hooks": {},
"linux": {
"resources": {
"devices": [
{
"allow": false,
"access": "rwm"
}
]
},
"namespaces": [
{
"type": "pid"
},
{
"type": "ipc"
},
{
"type": "mount"
}
]
},
"annotations": {
"com.example.key1": "value1",
"com.example.key2": "value2"
}
}
|
