How to use --security-opt in Podman API

[ruspaul013]

Hello!

I am trying to add security-opt support in nomad-driver-podman [PR-link], but the API does not include security_opt as in docker. Is there anything I can do to map the values so that this flag can be used?

[Luap99]

They have their own option in the specgen format instead of one security-opt field that handles a bunch of different things

podman/pkg/specgenutil/specgen.go

Line 700 in 35768ae

for _, opt := range c.SecurityOpt {

So you pass "no_new_privileges" : true for example in the specgen json, seem like you PR already parses it.

[ruspaul013]

Thank you @Luap99. I will take a look.