mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 06:03:57 +08:00
Aleksa Sarai
b9a4727f54
This really isn't ideal but it can be used to avoid the largest issues with the memfd-based runc binary protection. There are several caveats with using this tool, see the help page for the new binary for details. Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>
12 lines
218 B
Desktop File
12 lines
218 B
Desktop File
[Unit]
|
|
Description=Manage memfd-bind of %I
|
|
Documentation=https://github.com/opencontainers/runc
|
|
|
|
[Service]
|
|
Type=simple
|
|
ExecStart=memfd-bind "%I"
|
|
ExecStop=memfd-bind --cleanup "%I"
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|