Docker Driver Support To Enable Privileged Mode

Registered by Daniel Kuffner on 2013-12-05

In order to make a NFS mount (or a mount in general) or to use docker in docker it is needed to start a container in the privileged mode.

docker run -privileged -d centos /bin/bash

The docker drive could support that feature to enable the privileged mode via meta data.

nova boot --meta "Privileged=true" --flavor m1.tiny --image centos:latest

This feature might not make much sense for a public cloud provider since it is a security risk. For that reason I propose to disable the feature by default and provide a configuration property to enable it.

Blueprint information

Status:
Not started
Approver:
Sam Alba
Priority:
Undefined
Drafter:
None
Direction:
Needs approval
Assignee:
Daniel Kuffner
Definition:
Drafting
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

Marking this blueprint as definition: Drafting. If you are still working on this, please re-submit via nova-specs. If not, please mark as obsolete, and add a quick comment to describe why. --johnthetubaguy (20th April 2014)

We need to move this to Nova-docker - https://blueprints.launchpad.net/nova-docker/ -- dims (Dec 17,2014)

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.