search

genuinetools / riddler

A tool to convert docker inspect to the opencontainers runc spec.
MIT License
253 stars 21 forks source link

always outputs apparmor profile #8

Closed justincormack closed 8 years ago

justincormack commented 8 years ago

riddler always outputs an apparmor profile "docker-default" even if there is no apparmor...

jessfraz commented 8 years ago

Another "feature" lol

On Wednesday, July 13, 2016, Justin Cormack notifications@github.com wrote:

riddler always outputs an apparmor profile "docker-default" even if there is no apparmor...

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/jfrazelle/riddler/issues/8, or mute the thread https://github.com/notifications/unsubscribe/ABYNbABIYbVN9Q924oq0XOZU91RfBHaAks5qVSmRgaJpZM4JLsT8 .

Jessie Frazelle 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 pgp.mit.edu http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3

justincormack commented 8 years ago

Much feature! Such Debian! On 13 Jul 2016 7:10 p.m., "Jess Frazelle" notifications@github.com wrote:

Another "feature" lol

On Wednesday, July 13, 2016, Justin Cormack notifications@github.com wrote:

riddler always outputs an apparmor profile "docker-default" even if there is no apparmor...

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/jfrazelle/riddler/issues/8, or mute the thread < https://github.com/notifications/unsubscribe/ABYNbABIYbVN9Q924oq0XOZU91RfBHaAks5qVSmRgaJpZM4JLsT8

.

Jessie Frazelle 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 pgp.mit.edu < http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3>

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/jfrazelle/riddler/issues/8#issuecomment-232439834, or mute the thread https://github.com/notifications/unsubscribe/AAdcPD7ycP6Bi5G3nRvgEwczDy9W8yPVks5qVSoXgaJpZM4JLsT8 .

justincormack commented 8 years ago

Actually, the best way to fix this is to just do the docker create with --security-opt apparmor=unconfined and then it does the right thing.