Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
update
Signed-off-by: Yanqiang Miao <miao.yanqiang@zte.com.cn>
| ... | ... |
@@ -345,13 +345,13 @@ Supported networks : |
| 345 | 345 |
<td class="no-wrap"><strong>container</strong>:<name|id></td> |
| 346 | 346 |
<td> |
| 347 | 347 |
Use the network stack of another container, specified via |
| 348 |
- its *name* or *id*. |
|
| 348 |
+ its <i>name</i> or <i>id</i>. |
|
| 349 | 349 |
</td> |
| 350 | 350 |
</tr> |
| 351 | 351 |
<tr> |
| 352 | 352 |
<td class="no-wrap"><strong>NETWORK</strong></td> |
| 353 | 353 |
<td> |
| 354 |
- Connects the container to a user created network (using `docker network create` command) |
|
| 354 |
+ Connects the container to a user created network (using <code>docker network create</code> command) |
|
| 355 | 355 |
</td> |
| 356 | 356 |
</tr> |
| 357 | 357 |
</tbody> |
| ... | ... |
@@ -624,15 +624,15 @@ but the volume for `/bar` will not. Volumes inherited via `--volumes-from` will |
| 624 | 624 |
with the same logic -- if the original volume was specified with a name it will **not** be removed. |
| 625 | 625 |
|
| 626 | 626 |
## Security configuration |
| 627 |
- --security-opt="label=user:USER" : Set the label user for the container |
|
| 628 |
- --security-opt="label=role:ROLE" : Set the label role for the container |
|
| 629 |
- --security-opt="label=type:TYPE" : Set the label type for the container |
|
| 630 |
- --security-opt="label=level:LEVEL" : Set the label level for the container |
|
| 631 |
- --security-opt="label=disable" : Turn off label confinement for the container |
|
| 632 |
- --security-opt="apparmor=PROFILE" : Set the apparmor profile to be applied to the container |
|
| 633 |
- --security-opt="no-new-privileges" : Disable container processes from gaining new privileges |
|
| 634 |
- --security-opt="seccomp=unconfined": Turn off seccomp confinement for the container |
|
| 635 |
- --security-opt="seccomp=profile.json: White listed syscalls seccomp Json file to be used as a seccomp filter |
|
| 627 |
+ --security-opt="label=user:USER" : Set the label user for the container |
|
| 628 |
+ --security-opt="label=role:ROLE" : Set the label role for the container |
|
| 629 |
+ --security-opt="label=type:TYPE" : Set the label type for the container |
|
| 630 |
+ --security-opt="label=level:LEVEL" : Set the label level for the container |
|
| 631 |
+ --security-opt="label=disable" : Turn off label confinement for the container |
|
| 632 |
+ --security-opt="apparmor=PROFILE" : Set the apparmor profile to be applied to the container |
|
| 633 |
+ --security-opt="no-new-privileges" : Disable container processes from gaining new privileges |
|
| 634 |
+ --security-opt="seccomp=unconfined" : Turn off seccomp confinement for the container |
|
| 635 |
+ --security-opt="seccomp=profile.json": White listed syscalls seccomp Json file to be used as a seccomp filter |
|
| 636 | 636 |
|
| 637 | 637 |
|
| 638 | 638 |
You can override the default labeling scheme for each container by specifying |
| ... | ... |
@@ -737,7 +737,7 @@ We have four ways to set user memory usage: |
| 737 | 737 |
<td class="no-wrap"><strong>memory=L<inf, memory-swap=2*L</strong></td> |
| 738 | 738 |
<td> |
| 739 | 739 |
(specify memory without memory-swap) The container is not allowed to |
| 740 |
- use more than L bytes of memory, swap *plus* memory usage is double |
|
| 740 |
+ use more than L bytes of memory, swap <i>plus</i> memory usage is double |
|
| 741 | 741 |
of that. |
| 742 | 742 |
</td> |
| 743 | 743 |
</tr> |
| ... | ... |
@@ -747,7 +747,7 @@ We have four ways to set user memory usage: |
| 747 | 747 |
</td> |
| 748 | 748 |
<td> |
| 749 | 749 |
(specify both memory and memory-swap) The container is not allowed to |
| 750 |
- use more than L bytes of memory, swap *plus* memory usage is limited |
|
| 750 |
+ use more than L bytes of memory, swap <i>plus</i> memory usage is limited |
|
| 751 | 751 |
by S. |
| 752 | 752 |
</td> |
| 753 | 753 |
</tr> |