docs(docker): remove array around seccomp profile (#18457)
This commit is contained in:
parent
cb1dcccbe6
commit
5f309ec49a
|
|
@ -76,20 +76,18 @@ docker run -it --rm --ipc=host --user pwuser --security-opt seccomp=seccomp_prof
|
||||||
[`seccomp_profile.json`](https://github.com/microsoft/playwright/blob/main/utils/docker/seccomp_profile.json) is needed to run Chromium with sandbox. This is a [default Docker seccomp profile](https://github.com/docker/engine/blob/d0d99b04cf6e00ed3fc27e81fc3d94e7eda70af3/profiles/seccomp/default.json) with extra user namespace cloning permissions:
|
[`seccomp_profile.json`](https://github.com/microsoft/playwright/blob/main/utils/docker/seccomp_profile.json) is needed to run Chromium with sandbox. This is a [default Docker seccomp profile](https://github.com/docker/engine/blob/d0d99b04cf6e00ed3fc27e81fc3d94e7eda70af3/profiles/seccomp/default.json) with extra user namespace cloning permissions:
|
||||||
|
|
||||||
```json
|
```json
|
||||||
[
|
{
|
||||||
{
|
"comment": "Allow create user namespaces",
|
||||||
"comment": "Allow create user namespaces",
|
"names": [
|
||||||
"names": [
|
"clone",
|
||||||
"clone",
|
"setns",
|
||||||
"setns",
|
"unshare"
|
||||||
"unshare"
|
],
|
||||||
],
|
"action": "SCMP_ACT_ALLOW",
|
||||||
"action": "SCMP_ACT_ALLOW",
|
"args": [],
|
||||||
"args": [],
|
"includes": {},
|
||||||
"includes": {},
|
"excludes": {}
|
||||||
"excludes": {}
|
}
|
||||||
}
|
|
||||||
]
|
|
||||||
```
|
```
|
||||||
|
|
||||||
:::note
|
:::note
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue