Files
talos/hack
Andrey Smirnov e6fa401b66 fix: enable seccomp default profile by default
This enable seccomp profile for all containers launched by Talos: apid,
trustd, etcd and kubelet.

Also by default disallow gaining more privileges in the container
(basically disables setuid). As containers are running as root this is
no-op, but soon we'll have running as non-root users and this becomes
important.

Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>
2021-08-12 21:26:58 +03:00
..
2020-04-17 11:24:48 -07:00