helm
helm copied to clipboard
remove /proc/sysrq-trigger mount, default host namespaces true
Background
- Gremlin currently allows a host shutdown in two different ways: using a
/proc/sysrq-trigger, and issuing a shutdown from the host'sPIDnamespace. Only the latter is documented, and the former performs a non-graceful shutdown (which isn't documented in Gremlin). - At the same time,
hostPID=truehas become a requirement for all container drivers except for the legacydockerdriver. It makes sense to flip this totrueto minimize issues at install time resulting from incorrect arguments.-
hostNetworkis in the same situation, though unrelated to shutdown attacks.
-
Change
- Remove mount of
/proc/sysrq-triggerwhich disables this functionality in Gremlin - default
hostPID=trueto enable host attacks without sysrq - while we're at it, default
hostNetwork=trueas well, since it is required for reliability management features.