features: implement returning potentiallyUnsafeConfigAnnotations list

See https://github.com/opencontainers/runtime-spec/blob/v1.2.0/features.md#unsafe-annotations-in-configjson Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2026-07-11 06:03:57 +08:00 · 2024-03-09 21:30:56 +09:00
parent 109a7a0478
commit eefc6ae254
2 changed files with 5 additions and 1 deletions
@@ -64,6 +64,11 @@ var featuresCommand = cli.Command{
 					},
 				},
 			},
+			PotentiallyUnsafeConfigAnnotations: []string{
+				"bundle",
+				"org.systemd.property.", // prefix form
+				"org.criu.config",
+			},
 		}

 		if seccomp.Enabled {