diff options
| author | Fabricio Voznika <fvoznika@google.com> | 2019-06-12 09:40:50 -0700 |
|---|---|---|
| committer | Shentubot <shentubot@google.com> | 2019-06-12 09:41:50 -0700 |
| commit | 356d1be140bb51f2a50d2c7fe24242cbfeedc9d6 (patch) | |
| tree | 3685e89ffdf701c2e9aebb19023cf0606ca8593b /runsc/test/testutil/BUILD | |
| parent | df110ad4fe571721a7eb4a5a1f9ce92584ef7809 (diff) | |
Allow 'runsc do' to run without root
'--rootless' flag lets a non-root user execute 'runsc do'.
The drawback is that the sandbox and gofer processes will
run as root inside a user namespace that is mapped to the
caller's user, intead of nobody. And network is defaulted
to '--network=host' inside the root network namespace. On
the bright side, it's very convenient for testing:
runsc --rootless do ls
runsc --rootless do curl www.google.com
PiperOrigin-RevId: 252840970
Diffstat (limited to 'runsc/test/testutil/BUILD')
| -rw-r--r-- | runsc/test/testutil/BUILD | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/runsc/test/testutil/BUILD b/runsc/test/testutil/BUILD index ddec81444..eedf962a4 100644 --- a/runsc/test/testutil/BUILD +++ b/runsc/test/testutil/BUILD @@ -18,6 +18,5 @@ go_library( "@com_github_cenkalti_backoff//:go_default_library", "@com_github_kr_pty//:go_default_library", "@com_github_opencontainers_runtime-spec//specs-go:go_default_library", - "@com_github_syndtr_gocapability//capability:go_default_library", ], ) |