Alexandre Pujol
|
2878fa6a2e
|
feat(profiles): general update.
|
2022-07-29 16:47:09 +01:00 |
|
Jeroen Rijken
|
58cfe9ad37
|
Small fixes
|
2022-07-29 16:41:19 +01:00 |
|
Jeroen Rijken
|
616753aea0
|
Consolidate rules
|
2022-07-29 16:41:19 +01:00 |
|
Jeroen Rijken
|
fcea04c69b
|
Remove complain flags
|
2022-07-29 16:41:19 +01:00 |
|
Jeroen Rijken
|
e724d835ed
|
Add ps to ptrace
|
2022-07-29 16:41:19 +01:00 |
|
Jeroen Rijken
|
e4d118365a
|
Add Kubernetes pause container
|
2022-07-29 16:41:19 +01:00 |
|
Jeroen Rijken
|
e6525e1f04
|
Add missing volumes
|
2022-07-29 16:41:19 +01:00 |
|
Jeroen Rijken
|
07f1db2725
|
Fix some typo's
|
2022-07-29 16:41:19 +01:00 |
|
Jeroen Rijken
|
33da7af6e8
|
container updates
|
2022-07-29 16:41:19 +01:00 |
|
Alexandre Pujol
|
48c023d4bd
|
feat(profiles): containerd support for docker & cosmetic.
|
2022-07-21 20:15:02 +01:00 |
|
Jeroen Rijken
|
eb87e035b8
|
Initial containerd-shim-runc support
|
2022-07-21 20:05:56 +01:00 |
|
Jeroen Rijken
|
266d5c6dc0
|
Add IPV6
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
b404d7e4c4
|
Move xtables-nft to separate profile
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
130c562488
|
Allow containerd signal from k3s
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
61eab33cd8
|
Add ptrace subprofile
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
d6d9c943ae
|
Add missing permission
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
dca33292f7
|
Update ruleset for clean installation.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
a1f4dbee50
|
First batch of cleanups based on PR comments.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
c03c624472
|
Allow signals from containerd to calico
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
8f81a39df1
|
Support read AppArmor profiles
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
560250cf5f
|
Fix mode
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
2deb2a48a6
|
Fix name range.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
a3415dc42c
|
Typo and calico proc.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
c84455cca4
|
Fixes for container network creation.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
3e006e3c76
|
Fix for calico unable to create network namespace.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
5565217c91
|
Move xtables profile to child profile of k3s.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
78cfb23bff
|
Apply suggested fixes from PR
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
5af6cda328
|
Allow dbus messages and user database reading.
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
463da2a8f4
|
Initial support for k3s
|
2022-07-21 19:46:45 +01:00 |
|
Jeroen Rijken
|
2ec802d40d
|
Remove deny root
|
2022-07-18 19:45:04 +01:00 |
|
Jeroen Rijken
|
e9bcd3f820
|
Small fixes
|
2022-07-18 19:45:04 +01:00 |
|
Jeroen Rijken
|
70aa5fdbb2
|
Small fixes
|
2022-07-18 19:45:04 +01:00 |
|
Jeroen Rijken
|
5a02490082
|
Needed for certain containers like calico
|
2022-07-18 19:45:04 +01:00 |
|
Jeroen Rijken
|
13aee74df9
|
Various containerd fixes
|
2022-07-18 19:45:04 +01:00 |
|
Alexandre Pujol
|
eb6c7548f5
|
feat(profiles): general update.
|
2022-07-15 21:55:59 +01:00 |
|
Jeroen Rijken
|
682df516bf
|
Make calico part of cni
|
2022-07-15 21:43:08 +01:00 |
|
Jeroen Rijken
|
02ad72b024
|
Allow containerd to (u)mount cni devices, and loopback to access them.
|
2022-07-15 21:43:08 +01:00 |
|
Jeroen Rijken
|
6c8e50534b
|
Cleanup profile
Signed-off-by: Jeroen Rijken <jeroen.rijken@xs4all.nl>
|
2022-07-15 21:43:08 +01:00 |
|
Alexandre Pujol
|
d8449de55e
|
feat(profiles): add and merge some cni profiles.
|
2022-07-10 14:24:09 +01:00 |
|
Alex
|
40d8c68f22
|
Merge branch 'master' into feat/cni
|
2022-07-10 13:41:50 +01:00 |
|
Jeroen Rijken
|
d10f2c073c
|
Alphabetical sorting, group common options.
|
2022-07-10 13:39:01 +01:00 |
|
Jeroen Rijken
|
59f8b893ff
|
Cleanup profiles according to standards
|
2022-07-10 13:39:01 +01:00 |
|
Jeroen Rijken
|
3810c1668e
|
Basic ZFS support
|
2022-07-10 13:39:01 +01:00 |
|
Alex
|
6e1e7dc32b
|
Apply suggestions from code review
|
2022-07-10 12:38:11 +00:00 |
|
Jeroen Rijken
|
8a13d71edb
|
Update CNI path, set containerd to attach_disconnected, cleanups.
|
2022-07-10 13:36:44 +02:00 |
|
Jeroen Rijken
|
9fb43325a3
|
Add headers to new policies
|
2022-07-10 12:49:33 +02:00 |
|
Jeroen Rijken
|
7524bfa343
|
Syntax fixes
|
2022-07-10 12:43:52 +02:00 |
|
Jeroen Rijken
|
8413f6b9e6
|
Allow containerd to access SSL certs for pulling container images.
|
2022-07-10 11:51:15 +02:00 |
|
Jeroen Rijken
|
edcd130432
|
Calico profile cleanup.
|
2022-07-09 20:53:21 +02:00 |
|
Jeroen Rijken
|
2ffa3d1339
|
Cleanup profiles according to standards part 1/2
|
2022-07-09 20:46:59 +02:00 |
|