Akihiro Suda c54f4a986d support --oci-worker-no-process-sandbox ... Note that this mode allows build executor containers to kill (and potentially ptrace) an arbitrary process in the BuildKit host namespace. This mode should be enabled only when the BuildKit is running in a container as an unprivileged user. Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>		2019-01-08 10:42:52 +09:00
..
executor.go	support --oci-worker-no-process-sandbox	2019-01-08 10:42:52 +09:00