Skip to main content

Module isolation

Module isolation 

Source
Expand description

How a runner container is kept from the host while it runs its own Docker Engine. A backend decides only how the container is created; its name, limits, labels and slice are the same for every backend (docker).

Structs§

Sysbox
Sysbox runs Docker inside an unprivileged container, in its own user namespace.
UnsafeDind
Privileged Docker-in-Docker: root in the container is root on the host.

Traits§

Isolation
An isolation backend: how runner containers are created so their Docker Engine cannot reach the host.

Functions§

backend
The backend runnerd.toml names.