builder/docker: reference to docker docs regarding capabilities

This commit is contained in:
Michael Kuryshev 2020-07-15 03:04:13 +02:00
parent 6e77d9d3a9
commit 37d0f48599
2 changed files with 12 additions and 4 deletions

View File

@ -46,9 +46,13 @@ type Config struct {
// the [artifice
// post-processor](/docs/post-processors/artifice).
Discard bool `mapstructure:"discard" required:"true"`
// An array of additional Linux capabilities to grant to the container.
// An array of additional [Linux
// capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities)
// to grant to the container.
CapAdd []string `mapstructure:"cap_add" required:"false"`
// An array of Linux capabilities to drop from the container.
// An array of [Linux
// capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities)
// to drop from the container.
CapDrop []string `mapstructure:"cap_drop" required:"false"`
// Username (UID) to run remote commands with. You can also set the group
// name/ID if you want: (UID or UID:GID). You may need this if you get

View File

@ -13,9 +13,13 @@
- `device` ([]string) - An array of devices which will be accessible in container when it's run
without `--privileged` flag.
- `cap_add` ([]string) - An array of additional Linux capabilities to grant to the container.
- `cap_add` ([]string) - An array of additional [Linux
capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities)
to grant to the container.
- `cap_drop` ([]string) - An array of Linux capabilities to drop from the container.
- `cap_drop` ([]string) - An array of [Linux
capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities)
to drop from the container.
- `exec_user` (string) - Username (UID) to run remote commands with. You can also set the group
name/ID if you want: (UID or UID:GID). You may need this if you get