Merge pull request #111924 from saschagrunert/cri-o-oci-hook
nixos/cri-o: add OCI seccomp bpf hook support
commit6caa6cb3f56ee0b0e4f2d5f890060530ff60f56d
authoradisbladis <adisbladis@gmail.com>
dateSat 6 Feb 2021, 12:03 (6 years ago)
parent3c6035ce2b7bdd
nixos/modules/virtualisation/cri-o.nix+4−1
@@ -103,7 +103,10 @@ in
103103 cgroup_manager = "systemd"
104104 log_level = "${cfg.logLevel}"
105105 pinns_path = "${cfg.package}/bin/pinns"
106− hooks_dir = []
106+ hooks_dir = [
107+ ${lib.optionalString config.virtualisation.containers.ociSeccompBpfHook.enable
108+ ''"${config.boot.kernelPackages.oci-seccomp-bpf-hook}",''}
109+ ]
107110
108111 ${optionalString (cfg.runtime != null) ''
109112 default_runtime = "${cfg.runtime}"