devcontainers / devcontainers/cli

`seccomp=profile.json` path isn't relative to `devcontainer-feature.json` or `compose.yml`

未关闭
#210 7 条评论 0 个 reaction 已指派 1 人 已被 @chrmarti 认领 在 GitHub 查看
feature-request
主要语言
TypeScript
星标
3k
派生
457
平均合并
13 小时 17 分钟
30 天内合并 PR
6

描述

# How is a path to a seccomp profile file specificed?

This doesn't work when **seccomp.json** is in same folder as **devcontainer-feature.json**
```jsonc
// devcontainer-feature.json
{
"securityOpt": ["seccomp=seccomp.json"]
}
```

This doesn't work when **seccomp.json** is in same folder as **compose.yml**
```jsonc
// devcontainer.json
{
"dockerComposeFile": "compose.yml",
// rest omitted...
}
```
```yml
# compose.yml
services:
app:
security_opt:
- seccomp:seccomp.json
```

seccomp accepts a path https://docs.docker.com/engine/security/seccomp/

```
$ docker run --rm \
-it \
--security-opt seccomp=/path/to/seccomp/profile.json \
hello-world
```

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。