[meta-virtualization] [PATCH 2/2] docker: allow enabling seccomp

Bruce Ashfield bruce.ashfield at gmail.com
Tue May 29 07:26:06 PDT 2018


merged.

Bruce

On Fri, May 25, 2018 at 9:58 AM, Pascal Bach <pascal.bach at siemens.com>
wrote:

> This requires libseccomp from meta-security so it is not enabled by
> default.
>
> Signed-off-by: Pascal Bach <pascal.bach at siemens.com>
> ---
>  recipes-containers/docker/docker_git.bb | 5 ++++-
>  1 file changed, 4 insertions(+), 1 deletion(-)
>
> diff --git a/recipes-containers/docker/docker_git.bb
> b/recipes-containers/docker/docker_git.bb
> index e055a4f..790170e 100644
> --- a/recipes-containers/docker/docker_git.bb
> +++ b/recipes-containers/docker/docker_git.bb
> @@ -62,6 +62,9 @@ DEPENDS = " \
>      libtool \
>      "
>
> +PACKAGECONFIG ??= ""
> +PACKAGECONFIG[seccomp] = "seccomp,,libseccomp"
> +
>  PACKAGES =+ "${PN}-contrib"
>
>  DEPENDS_append_class-target = " lvm2"
> @@ -105,7 +108,7 @@ do_compile() {
>         export CGO_CFLAGS="${CFLAGS} --sysroot=${STAGING_DIR_TARGET}"
>         export CGO_LDFLAGS="${LDFLAGS} --sysroot=${STAGING_DIR_TARGET}"
>         # in order to exclude devicemapper and btrfs -
> https://github.com/docker/docker/issues/14056
> -       export DOCKER_BUILDTAGS='exclude_graphdriver_btrfs
> exclude_graphdriver_devicemapper'
> +       export DOCKER_BUILDTAGS='exclude_graphdriver_btrfs
> exclude_graphdriver_devicemapper ${PACKAGECONFIG_CONFARGS}'
>
>         export DISABLE_WARN_OUTSIDE_CONTAINER=1
>
> --
> 2.11.0
>
> --
> _______________________________________________
> meta-virtualization mailing list
> meta-virtualization at yoctoproject.org
> https://lists.yoctoproject.org/listinfo/meta-virtualization
>



-- 
"Thou shalt not follow the NULL pointer, for chaos and madness await thee
at its end"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.yoctoproject.org/pipermail/meta-virtualization/attachments/20180529/cd77f991/attachment.html>


More information about the meta-virtualization mailing list