-
Notifications
You must be signed in to change notification settings - Fork 696
Description
What is the problem you're trying to solve
Tracks implementing the flag to set the NIS domain name for nerdctl run
. Docker supports this by setting the kernel.domainname
sysctl if the flag is provided, but this doesn't work for rootless containers. Calling setdomainname(2) in the UTS namespace would do the job and be rootless friendly, but the OCI runtime has to have a field to signify this (or do some weird hack). A domainname field was added to the runtime spec a couple months ago, and there's an open change to add support for this to runc so almost all the pieces are in play; crun also already supports this.
Describe the solution you'd like
I have an open change to containerd to get a spec option added to set this, so whenever that's in and runc is up to speed I think we could go ahead: containerd/containerd#7869
Additional context
No response