mirror of
https://github.com/engineer-man/piston.git
synced 2025-04-22 04:56:30 +02:00
v3 - Remove the use of unshare + privileged mode and instead (#195)
use seccomp to filter for socket syscalls
This commit is contained in:
parent
f6a4e67d5f
commit
552fb91c6b
8 changed files with 75 additions and 10 deletions
2
.github/workflows/package-pr.yaml
vendored
2
.github/workflows/package-pr.yaml
vendored
|
@ -70,7 +70,7 @@ jobs:
|
|||
runner_uid_max: 1500
|
||||
runner_gid_min: 1100
|
||||
runner_gid_max: 1500
|
||||
enable_unshare: false
|
||||
disable_networking: false
|
||||
output_max_size: 1024
|
||||
max_process_count: 64
|
||||
max_open_files: 2048
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue