Blob


1 {
2 "ociVersion": "1.0.0",
3 "root": {
4 "path": "rootfs",
5 "readonly": true
6 },
7 "mounts": [
8 {
9 "destination": "/proc",
10 "type": "proc",
11 "source": "proc"
12 },
13 {
14 "destination": "/dev",
15 "type": "tmpfs",
16 "source": "tmpfs",
17 "options": [
18 "nosuid",
19 "strictatime",
20 "mode=755",
21 "size=65536k"
22 ]
23 },
24 {
25 "destination": "/dev/pts",
26 "type": "devpts",
27 "source": "devpts",
28 "options": [
29 "nosuid",
30 "noexec",
31 "newinstance",
32 "ptmxmode=0666",
33 "mode=0620"
34 ]
35 },
36 {
37 "destination": "/dev/shm",
38 "type": "tmpfs",
39 "source": "shm",
40 "options": [
41 "nosuid",
42 "noexec",
43 "nodev",
44 "mode=1777",
45 "size=65536k"
46 ]
47 },
48 {
49 "destination": "/dev/mqueue",
50 "type": "mqueue",
51 "source": "mqueue",
52 "options": [
53 "nosuid",
54 "noexec",
55 "nodev"
56 ]
57 },
58 {
59 "destination": "/sys",
60 "type": "sysfs",
61 "source": "sysfs",
62 "options": [
63 "nosuid",
64 "noexec",
65 "nodev",
66 "ro"
67 ]
68 },
69 {
70 "destination": "/sys/fs/cgroup",
71 "type": "cgroup",
72 "source": "cgroup",
73 "options": [
74 "nosuid",
75 "noexec",
76 "nodev",
77 "relatime",
78 "ro"
79 ]
80 },
81 {
82 "destination": "/var/lib/minecraft",
83 "source": "versions/__VERSION__",
84 "options": [
85 "bind"
86 ]
87 },
88 {
89 "destination": "/var/lib/minecraft/worlds",
90 "source": "worlds",
91 "options": [
92 "bind"
93 ]
94 }
95 ],
96 "process": {
97 "terminal": true,
98 "cwd": "/var/lib/minecraft",
99 "env": [
100 "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
101 "TERM=xterm",
102 "LD_LIBRARY_PATH=."
103 ],
104 "args": [
105 "./bedrock_server"
106 ],
107 "capabilities": {
108 "bounding": [
109 "CAP_AUDIT_WRITE",
110 "CAP_KILL",
111 "CAP_NET_BIND_SERVICE",
112 "CAP_SYS_RESOURCES"
113 ],
114 "effective": [
115 "CAP_AUDIT_WRITE",
116 "CAP_KILL",
117 "CAP_NET_BIND_SERVICE",
118 "CAP_SYS_RESOURCES"
119 ],
120 "inheritable": [
121 ],
122 "permitted": [
123 "CAP_AUDIT_WRITE",
124 "CAP_KILL",
125 "CAP_NET_BIND_SERVICE",
126 "CAP_SYS_RESOURCES"
127 ],
128 "ambient": [
129 "CAP_AUDIT_WRITE",
130 "CAP_KILL",
131 "CAP_NET_BIND_SERVICE",
132 "CAP_SYS_RESOURCES"
134 },
135 "rlimits": [
137 "type": "RLIMIT_NOFILE",
138 "hard": 1024,
139 "soft": 1024
141 ],
142 "noNewPrivileges": true,
143 "user": {
144 "uid": 0,
145 "gid": 0
147 },
148 "hostname": "mcl",
149 "linux": {
150 "resources": {
151 "devices": [
153 "allow": false,
154 "access": "rwm"
157 },
158 "namespaces": [
160 "type": "pid"
161 },
163 "type": "ipc"
164 },
166 "type": "uts"
167 },
169 "type": "user"
170 },
172 "type": "mount"
174 ],
175 "maskedPaths": [
176 "/proc/acpi",
177 "/proc/asound",
178 "/proc/kcore",
179 "/proc/keys",
180 "/proc/latency_stats",
181 "/proc/timer_list",
182 "/proc/timer_stats",
183 "/proc/sched_debug",
184 "/sys/firmware",
185 "/proc/scsi"
186 ],
187 "readonlyPaths": [
188 "/proc/bus",
189 "/proc/fs",
190 "/proc/irq",
191 "/proc/sys",
192 "/proc/sysrq-trigger"