Add warning that using --no-pivot is not secure

It is only intended for compatibility with the old rootfs ISO, and not needed with the new tmpfs ISO.
kubernetes · Aug 24, 2019 · eec1a06 · eec1a06
1 parent ae8894c
commit eec1a06
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/provision/buildroot.go b/pkg/provision/buildroot.go
@@ -110,6 +110,7 @@ Type=notify
 
 `
 	if noPivot {
+		log.Warn("Using fundamentally insecure --no-pivot option")
 		engineConfigTmpl += `
 # DOCKER_RAMDISK disables pivot_root in Docker, using MS_MOVE instead.
 Environment=DOCKER_RAMDISK=yes