shoenig / nomad-pledge-driver

Nomad task driver capable of blocking unwanted syscall and filesystem access. Based on the pledge utility for Linux by Justine Tunney
Mozilla Public License 2.0
22 stars 2 forks source link

plugin: work with nomad 1.7 #76

Closed shoenig closed 11 months ago

shoenig commented 11 months ago

Cgroup paths change in Nomad 1.7. Just use the "cpuset cgroup" path from the task config since with cgroups v2 that is just the task's cgroup, and we only care about cgroups v2.