Turning on isolation for exec

2016-02-03 16:14:13 -08:00 · 2016-02-03 16:14:13 -08:00 · 6a719ef167
parent 1c616deab3
commit 6a719ef167
1 changed files with 6 additions and 3 deletions
--- a/client/driver/exec.go
+++ b/client/driver/exec.go
@ -115,9 +115,12 @@ func (d *ExecDriver) Start(ctx *ExecContext, task *structs.Task) (DriverHandle,
 		return nil, err
 	}
 	executorCtx := &plugins.ExecutorContext{
-		TaskEnv:  d.taskEnv,
-		AllocDir: ctx.AllocDir,
-		Task:     task,
+		TaskEnv:          d.taskEnv,
+		AllocDir:         ctx.AllocDir,
+		Task:             task,
+		ResourceLimits:   true,
+		FSIsolation:      true,
+		UnprivilegedUser: false,
 	}
 	ps, err := executor.LaunchCmd(&plugins.ExecCommand{Cmd: command, Args: driverConfig.Args}, executorCtx)
 	if err != nil {