diff --git a/docker.go b/docker.go index 90301c2..44ce44d 100644 --- a/docker.go +++ b/docker.go @@ -343,6 +343,10 @@ func commandDaemon(daemon Daemon) *exec.Cmd { "--host=unix:///var/run/docker.sock", } + if _, err := os.Stat("/etc/docker/default.json"); err == nil { + args = append(args, "--seccomp-profile=/etc/docker/default.json") + } + if daemon.StorageDriver != "" { args = append(args, "-s", daemon.StorageDriver) } diff --git a/docker/docker/Dockerfile.linux.arm b/docker/docker/Dockerfile.linux.arm index 1a8d8b3..38c8992 100644 --- a/docker/docker/Dockerfile.linux.arm +++ b/docker/docker/Dockerfile.linux.arm @@ -2,5 +2,14 @@ FROM arm32v6/docker:19.03.8-dind ENV DOCKER_HOST=unix:///var/run/docker.sock +RUN apk --update add --virtual .build-deps curl && \ + mkdir -p /etc/docker/ && \ + curl -SsL -o /etc/docker/default.json https://raw.githubusercontent.com/moby/moby/19.03/profiles/seccomp/default.json && \ + sed -i 's/SCMP_ACT_ERRNO/SCMP_ACT_TRACE/g' /etc/docker/default.json && \ + chmod 600 /etc/docker/default.json && \ + apk del .build-deps && \ + rm -rf /var/cache/apk/* && \ + rm -rf /tmp/* + ADD release/linux/arm/drone-docker /bin/ ENTRYPOINT ["/usr/local/bin/dockerd-entrypoint.sh", "/bin/drone-docker"]