burble/nomad-driver-containerd
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update README.md for capabilities example job.

Browse Source
This commit is contained in:
Shishir Mahajan 2020-06-23 21:09:59 -07:00
parent 5b4aa4ec10
commit b2fa8b9e8b
No known key found for this signature in database
GPG Key ID: D41782E7688DEC4A
1 changed files with 36 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
example/README.md
View File

@ -8,7 +8,7 @@ $ nomad job run redis.nomad
```
will start a `redis` server using `nomad-driver-containerd`
### Exec into redis container
**Exec into redis container**
```
$ nomad job status redis
@ -60,3 +60,38 @@ While the container is running, you can check the stats using:
```
$ nomad alloc status -stats <allocation_id>
```
## Capabilities
```
$ nomad job run capabilities.nomad
```
will start an `ubuntu:16.04` container using `nomad-driver-containerd`.
This container sleeps for 10 mins (600 seconds) and add (and drop) the following capabilities.
**New capabilities added:**
```
CAP_SYS_ADMIN
CAP_IPC_OWNER
CAP_IPC_LOCK
```
**Existing capabilities dropped:**
```
CAP_CHOWN
CAP_SYS_CHROOT
CAP_DAC_OVERRIDE
```
**Exec into capabilities container to check capabilities**
```
$ nomad job status capabilities
```
Copy the allocation ID from the output of `nomad job status` command.
```
$ nomad alloc exec -i -t <allocation_id> /bin/bash
```
Print capabilities (Inside the container)
```
$ capsh --print
```