()
| 52 | } |
| 53 | |
| 54 | func (m *Manager) runnerExample() *RunnerSpec { |
| 55 | return &specs.Spec{ |
| 56 | Version: specs.Version, |
| 57 | Root: &specs.Root{ |
| 58 | Path: m.Options.RootfsPath, |
| 59 | Readonly: true, |
| 60 | }, |
| 61 | Process: &specs.Process{ |
| 62 | Terminal: false, |
| 63 | User: specs.User{}, |
| 64 | Args: []string{}, |
| 65 | Env: []string{ |
| 66 | "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", |
| 67 | "TERM=xterm", |
| 68 | }, |
| 69 | Cwd: "/", |
| 70 | NoNewPrivileges: true, |
| 71 | Capabilities: &specs.LinuxCapabilities{ |
| 72 | Bounding: []string{ |
| 73 | "CAP_AUDIT_WRITE", |
| 74 | "CAP_KILL", |
| 75 | "CAP_NET_BIND_SERVICE", |
| 76 | "CAP_SETUID", |
| 77 | "CAP_SETGID", |
| 78 | }, |
| 79 | Permitted: []string{ |
| 80 | "CAP_AUDIT_WRITE", |
| 81 | "CAP_KILL", |
| 82 | "CAP_NET_BIND_SERVICE", |
| 83 | "CAP_SETUID", |
| 84 | "CAP_SETGID", |
| 85 | }, |
| 86 | Inheritable: []string{ |
| 87 | "CAP_AUDIT_WRITE", |
| 88 | "CAP_KILL", |
| 89 | "CAP_NET_BIND_SERVICE", |
| 90 | "CAP_SETUID", |
| 91 | "CAP_SETGID", |
| 92 | }, |
| 93 | Ambient: []string{ |
| 94 | "CAP_AUDIT_WRITE", |
| 95 | "CAP_KILL", |
| 96 | "CAP_NET_BIND_SERVICE", |
| 97 | "CAP_SETUID", |
| 98 | "CAP_SETGID", |
| 99 | }, |
| 100 | Effective: []string{ |
| 101 | "CAP_AUDIT_WRITE", |
| 102 | "CAP_KILL", |
| 103 | "CAP_NET_BIND_SERVICE", |
| 104 | "CAP_SETUID", |
| 105 | "CAP_SETGID", |
| 106 | }, |
| 107 | }, |
| 108 | Rlimits: []specs.POSIXRlimit{ |
| 109 | { |
| 110 | Type: "RLIMIT_NOFILE", |
| 111 | Hard: uint64(1024 * 1024), |
no outgoing calls
no test coverage detected