Commit 38f875de authored by BAIRE Anthony's avatar BAIRE Anthony
Browse files

disable network access in the jobs

parent cfa7268c
......@@ -1078,6 +1078,9 @@ class JobManager(Manager):
cap_drop = ["all"],
# FIXME: CAP_DAC_OVERRIDE needed because all nfs files have uid,gid=1000,1000
cap_add = ["dac_override"],
# disable network access (for security reason)
network_mode = "none",
cpu_quota = (None if info.cpu is None else (info.cpu * 1024)),
cpu_period = (None if info.cpu is None else 1024),
# cpu_shares = info.cpu,
......
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment