add support privilege to container

Signed-off-by: Xian Chaobo <[email protected]>

agent/exec/container/container.go

@@ -230,8 +230,9 @@ func getMountMask(m *api.Mount) string {
 
 func (c *containerConfig) hostConfig() *enginecontainer.HostConfig {
 	return &enginecontainer.HostConfig{
-		Resources: c.resources(),
-		Binds:     c.binds(),
+		Resources:  c.resources(),
+		Binds:      c.binds(),
+		Privileged: c.spec().Privileged,
 	}
 }
 

api/specs.proto

@@ -175,6 +175,9 @@ message ContainerSpec {
 
 	// PullOptions parameterize the behavior of image pulls.
 	PullOptions pull_options = 10;
+
+	// Privileged give extended privileges to the container.
+	bool Privileged = 11;
 }
 
 // EndpointSpec defines the properties that can be configured to

cmd/swarmctl/service/flagparser/container.go

@@ -38,5 +38,13 @@ func parseContainer(flags *pflag.FlagSet, spec *api.ServiceSpec) error {
 		spec.Task.GetContainer().Env = env
 	}
 
+	if flags.Changed("privileged") {
+		privileged, err := flags.GetBool("privileged")
+		if err != nil {
+			return err
+		}
+		spec.Task.GetContainer().Privileged = privileged
+	}
+
 	return nil
 }

cmd/swarmctl/service/flagparser/flags.go

@@ -20,6 +20,7 @@ func AddServiceFlags(flags *pflag.FlagSet) {
 	flags.StringSlice("command", nil, "override entrypoint")
 	flags.StringSlice("args", nil, "container args")
 	flags.StringSlice("env", nil, "container env")
+	flags.BoolP("privileged", "", false, "give extended privileges to container (default false)")
 
 	flags.StringSlice("ports", nil, "ports")
 	flags.String("network", "", "network name")