From 37d0f4859942ff3c7259b78eb52be7a8693b7b3e Mon Sep 17 00:00:00 2001 From: Michael Kuryshev Date: Wed, 15 Jul 2020 03:04:13 +0200 Subject: [PATCH] builder/docker: reference to docker docs regarding capabilities --- builder/docker/config.go | 8 ++++++-- .../pages/partials/builder/docker/Config-not-required.mdx | 8 ++++++-- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/builder/docker/config.go b/builder/docker/config.go index 51822290a..d04ce88f9 100644 --- a/builder/docker/config.go +++ b/builder/docker/config.go @@ -46,9 +46,13 @@ type Config struct { // the [artifice // post-processor](/docs/post-processors/artifice). Discard bool `mapstructure:"discard" required:"true"` - // An array of additional Linux capabilities to grant to the container. + // An array of additional [Linux + // capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities) + // to grant to the container. CapAdd []string `mapstructure:"cap_add" required:"false"` - // An array of Linux capabilities to drop from the container. + // An array of [Linux + // capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities) + // to drop from the container. CapDrop []string `mapstructure:"cap_drop" required:"false"` // Username (UID) to run remote commands with. You can also set the group // name/ID if you want: (UID or UID:GID). You may need this if you get diff --git a/website/pages/partials/builder/docker/Config-not-required.mdx b/website/pages/partials/builder/docker/Config-not-required.mdx index 602d32d35..e56587dc5 100644 --- a/website/pages/partials/builder/docker/Config-not-required.mdx +++ b/website/pages/partials/builder/docker/Config-not-required.mdx @@ -13,9 +13,13 @@ - `device` ([]string) - An array of devices which will be accessible in container when it's run without `--privileged` flag. -- `cap_add` ([]string) - An array of additional Linux capabilities to grant to the container. +- `cap_add` ([]string) - An array of additional [Linux + capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities) + to grant to the container. -- `cap_drop` ([]string) - An array of Linux capabilities to drop from the container. +- `cap_drop` ([]string) - An array of [Linux + capabilities](https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities) + to drop from the container. - `exec_user` (string) - Username (UID) to run remote commands with. You can also set the group name/ID if you want: (UID or UID:GID). You may need this if you get