Uploaded image for project: 'OpenShift Node'
  1. OpenShift Node
  2. OCPNODE-739

Add /usr/share/containers/oci/hooks.d to the "hooks_dir" array of /etc/crio/crio.conf.d/00-default.

    XMLWordPrintable

Details

    • Story
    • Resolution: Done
    • Undefined
    • None
    • None
    • None
    • None
    • False
    • False

    Description

      We're trying to add oci-seccomp-bpf into RHCOS as an extension (https://github.com/openshift/os/pull/596) as part of enabling seccomp profile recording which is functionality provided by the Security Profiles Operator for OCP (https://github.com/openshift/enhancements/pull/745)

       

      It would ease the deployment of the operator, especially the profile recording part, if CRIO would include the oci hook directory in the hooks_dir array by default.

      Attachments

        Issue Links

          blocks

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. CMP-927 Ask for oci seccomp bpf hook in RHCOS

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed

          Activity

            People

              rphillip@redhat.com Ryan Phillips
              jhrozek@redhat.com Jakub Hrozek
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: