add support privilege to container

Signed-off-by: Xian Chaobo <[email protected]>
moby · Jul 12, 2016 · e5fa1d9 · e5fa1d9
1 parent f98068e
commit e5fa1d9
Show file tree

Hide file tree

Showing 5 changed files with 139 additions and 87 deletions.
diff --git a/agent/exec/container/container.go b/agent/exec/container/container.go
@@ -109,9 +109,10 @@ func (c *containerConfig) config() *enginecontainer.Config {
 
 func (c *containerConfig) hostConfig() *enginecontainer.HostConfig {
 	hc := &enginecontainer.HostConfig{
-		Resources: c.resources(),
-		Binds:     c.binds(),
-		Tmpfs:     c.tmpfs(),
+		Resources:  c.resources(),
+		Binds:      c.binds(),
+		Privileged: c.spec().Privileged,
+		Tmpfs:      c.tmpfs(),
 	}
 
 	if c.task.LogDriver != nil {

diff --git a/api/specs.pb.go b/api/specs.pb.go
diff --git a/api/specs.proto b/api/specs.proto
@@ -179,6 +179,9 @@ message ContainerSpec {
 
 	// PullOptions parameterize the behavior of image pulls.
 	PullOptions pull_options = 10;
+
+	// Privileged give extended privileges to the container
+	bool privileged = 11;
 }
 
 // EndpointSpec defines the properties that can be configured to