diff options
| author | Chris Kühl <chris@kinvolk.io> | 2016-02-09 13:52:25 +0100 |
|---|---|---|
| committer | Chris Kühl <chris@kinvolk.io> | 2016-02-09 13:52:25 +0100 |
| commit | 68f1c720f3f947d2bf5f19c97b04b22438f4417f (patch) | |
| tree | 2c7ea2afbe98da8edb995867f1bd6a976b1fe66a | |
| parent | 251ca8e934414bee48e8c95189bed59b7d15a364 (diff) | |
docs: replace Rocket with rkt
| -rw-r--r-- | selinux.md | 4 | ||||
| -rw-r--r-- | volumes.md | 8 |
2 files changed, 6 insertions, 6 deletions
@@ -74,9 +74,9 @@ use-cases: We should avoid using the `:z` flag, because it relaxes the SELinux context so that any container (from an SELinux standpoint) can use the volume. -### Rocket +### rkt -Rocket currently reads the base SELinux context to use from `/etc/selinux/*/contexts/lxc_contexts` +rkt currently reads the base SELinux context to use from `/etc/selinux/*/contexts/lxc_contexts` and allocates a unique MCS label per pod. ### Kubernetes @@ -90,15 +90,15 @@ There is a [proposal](https://github.com/docker/docker/pull/14632) to add a bind Docker to change the ownership of a volume to the effective UID and GID of a container, but this has not yet been accepted. -### Rocket +### rkt -Rocket +rkt [image manifests](https://github.com/appc/spec/blob/master/spec/aci.md#image-manifest-schema) can -specify users and groups, similarly to how a Docker image can. A Rocket +specify users and groups, similarly to how a Docker image can. A rkt [pod manifest](https://github.com/appc/spec/blob/master/spec/pods.md#pod-manifest-schema) can also override the default user and group specified by the image manifest. -Rocket does not currently support supplemental groups or changing the owning UID or +rkt does not currently support supplemental groups or changing the owning UID or group of a volume, but it has been [requested](https://github.com/coreos/rkt/issues/1309). ## Use Cases |
