mirror of
https://github.com/lingble/talos.git
synced 2026-03-20 01:03:57 +00:00
This enable seccomp profile for all containers launched by Talos: apid, trustd, etcd and kubelet. Also by default disallow gaining more privileges in the container (basically disables setuid). As containers are running as root this is no-op, but soon we'll have running as non-root users and this becomes important. Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>