go-sandbox/runner/unshare/default.go
2019-09-18 01:42:10 -07:00

36 lines
534 B
Go

package unshare
import (
"golang.org/x/sys/unix"
"github.com/criyle/go-sandbox/pkg/mount"
)
const roBind = unix.MS_BIND | unix.MS_NOSUID | unix.MS_PRIVATE | unix.MS_RDONLY
var (
// DefaultMounts is a example of minimal rootfs
DefaultMounts = []mount.Mount{
{
Source: "/usr",
Target: "usr",
Flags: roBind,
},
{
Source: "/lib",
Target: "lib",
Flags: roBind,
},
{
Source: "/lib64",
Target: "lib64",
Flags: roBind,
},
{
Source: "/bin",
Target: "bin",
Flags: roBind,
},
}
)