defaultSeccompProfile = "/etc/sysconfig/manhattan.json"

[runcom]

is that value correct? manhattan.json?

Also, what default.json does in this repository?

[grantseltzer]

@runcom The name is arbitrary. The install option should move default.json to that location. If you have no objection to that idea I'll add it to the makefile and write about it in the README.md

[runcom]

Is the default coming from Docker? If that's the case I'd prefer docker installation to take care of installing it or otherwise it won't always be in sync

[grantseltzer]

Yes it is, and sure. Do you know if when Docker is installed if a default seccomp profile is placed somewhere?

[runcom]

It isn't (I'm maintaining the package in Fedora)

We shall leave this opened to track this

[grantseltzer]

For now should I do it the way I originally suggested?

[runcom]

yes, we'll remove the Makefile target after we fix docker installation

[grantseltzer]

👍

[grantseltzer]

Leaving this open for now

[rhatdan]

Yes it would be out of date. Having it rely on docker is not great either, especially where we would like to support pure OCI environments.

[runcom]

Yes it would be out of date. Having it rely on docker is not great either, especially where we would like to support pure OCI environments.

right, my proposal is then to have ocitools generate a default profile /cc @mrunalp

[rhatdan]

Ok that would be better.