You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I think the initial workflow should be as follows:
Run build script which creates a docker image containing all dependencies and the oster binary
Have a run script which emulates the oster CLI except under the hood runs oster inside the container with the correct permissions for accessing the kernel facilities
Also can have the run script run the build script if it hasn't been run yet.
The text was updated successfully, but these errors were encountered:
This is also a prime opportunity to use Karn for generating a custom seccomp profile. If run inside the container (i.e. the run script) use the container runtime to enforce seccomp, if not use the karn library in code itself to enforce the privs.
grantseltzer
changed the title
Create a container image and associated script for building/running oster without the need to install dependencies
Create a container image and associated script for building/running weaver without the need to install dependencies
Feb 6, 2020
I think the initial workflow should be as follows:
Also can have the run script run the build script if it hasn't been run yet.
The text was updated successfully, but these errors were encountered: