mount: # Basic binaries and libraries - type: bind source: /bin target: /bin readonly: true - type: bind source: /lib target: /lib readonly: true - type: bind source: /lib64 target: /lib64 readonly: true - type: bind source: /usr target: /usr readonly: true # Some compiler have multiple versions - type: bind source: /etc/alternatives target: /etc/alternatives readonly: true # fpc wants /etc/fpc.cfg - type: bind source: /etc/fpc.cfg target: /etc/fpc.cfg readonly: true # mono wants /etc/mono - type: bind source: /etc/mono target: /etc/mono readonly: true # ghc wants /var/lib/ghc - type: bind source: /var/lib/ghc target: /var/lib/ghc readonly: true # go wants /dev/null - type: bind source: /dev/null target: /dev/null # node wants /dev/urandom - type: bind source: /dev/urandom target: /dev/urandom # work dir - type: tmpfs target: /w data: size=16m,nr_inodes=4k # tmp dir - type: tmpfs target: /tmp data: size=16m,nr_inodes=4k # (optional) bind a /etc/passed to show customized user name - type: bind source: containerPasswd.txt target: /etc/passwd # java & ghc wants /proc/self/exe proc: true # container work directory workDir: /w # container host name hostName: executor_server # container domain name domainName: executor_server # container user uid uid: 1536 # container user gid gid: 1536