container: remove the unused ns from ocispec

Only keep the pidns and mntns for those containers in sandbox/pod. Signed-off-by: fupan <[email protected]>
hyperhq · Jul 12, 2018 · 9d2bee1 · 9d2bee1
1 parent 9f5d2d4
commit 9d2bee1
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/daemon/pod/container.go b/daemon/pod/container.go
@@ -648,6 +648,18 @@ func (c *Container) containerConfig(cjson *dockertypes.ContainerJSON) (*vc.Conta
 	}
 
 	ociSpec = c.ociSpec(cjson)
+
+	//remove those namespace types from ocispec
+	for _, ns := range []specs.LinuxNamespaceType{
+		specs.NetworkNamespace,
+		specs.UserNamespace,
+		specs.UTSNamespace,
+		specs.IPCNamespace,
+		specs.CgroupNamespace,
+	} {
+		oci.RemoveNamespace(ociSpec, ns)
+	}
+
 	ociSpecJson, err := json.Marshal(ociSpec)
 	if err != nil {
 		return &vc.ContainerConfig{}, nil