Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
| ... | ... |
@@ -667,18 +667,18 @@ It also causes any seccomp filters to be applied later, after privileges have be |
| 667 | 667 |
which may mean you can have a more restrictive set of filters. |
| 668 | 668 |
For more details, see the [kernel documentation](https://www.kernel.org/doc/Documentation/prctl/no_new_privs.txt). |
| 669 | 669 |
|
| 670 |
-## Specifying an init process |
|
| 670 |
+## Specify an init process |
|
| 671 | 671 |
|
| 672 |
-You can use the `--init` or `--init-path` flags to specify a process which |
|
| 673 |
-should be used as the PID 1 in the container, and which binary to use for this |
|
| 674 |
-init process, respectively. Specifying an init process ensures the usual |
|
| 675 |
-responsibilties of an init system, such as reaping zombie processes, are |
|
| 672 |
+You can use the `--init` flag to indicate that an init process should be used as |
|
| 673 |
+the PID 1 in the container. Specifying an init process ensures the usual |
|
| 674 |
+responsibilities of an init system, such as reaping zombie processes, are |
|
| 676 | 675 |
performed inside the created container. |
| 677 | 676 |
|
| 678 |
-The default init process used when specifying `--init` without `--init-path` is |
|
| 679 |
-[tini](https://github.com/krallin/tini). |
|
| 677 |
+The default init process used is the first `docker-init` executable found in the |
|
| 678 |
+system path of the Docker daemon process. This `docker-init` binary, included in |
|
| 679 |
+the default installation, is backed by [tini](https://github.com/krallin/tini). |
|
| 680 | 680 |
|
| 681 |
-## Specifying custom cgroups |
|
| 681 |
+## Specify custom cgroups |
|
| 682 | 682 |
|
| 683 | 683 |
Using the `--cgroup-parent` flag, you can pass a specific cgroup to run a |
| 684 | 684 |
container in. This allows you to create and manage cgroups on their own. You can |