Jan De Landtsheer
709c4a0865
Docker Infrastructure: - Added proper user namespace mapping in Dockerfile.alpine - Created 'builder' user with host UID/GID mapping at build time - Removed runtime user mapping (now handled in Dockerfile) - Set up Rust environment for mapped user instead of root - Fixed config mount consistency (removed :ro flags for real-time sync) Container Management: - Added 15 essential cgroup modules to modules-essential.list - Complete cgroups v1 and v2 support for container orchestration - Process control: cgroup_pids, cgroup_freezer, cgroup_cpuset - Memory management: memcg, hugetlb_cgroup - Network control: net_cls_cgroup, net_prio_cgroup - Device access: cgroup_device, devices_cgroup - Advanced features: cgroup_bpf, cgroup_perf_event, cgroup_debug Environment Updates: - Updated RFS Dockerfile to Alpine 3.22 for consistency - Ensured proper /build directory permissions for mapped user This enables true rootless operation with full container management capabilities, fixing permission issues and enabling Zero-OS container orchestration with complete resource control.
60 lines
840 B
Plaintext
60 lines
840 B
Plaintext
# Essential kernel modules for Zero-OS Alpine initramfs
|
|
# This file contains a curated list of essential modules for network and storage functionality
|
|
# Comments are supported (lines starting with #)
|
|
|
|
# Network drivers - Intel
|
|
e1000
|
|
e1000e
|
|
igb
|
|
ixgbe
|
|
i40e
|
|
ice
|
|
|
|
# Network drivers - Realtek
|
|
r8169
|
|
8139too
|
|
8139cp
|
|
|
|
# Network drivers - Broadcom
|
|
bnx2
|
|
bnx2x
|
|
tg3
|
|
b44
|
|
|
|
# Network drivers - Atheros
|
|
atl1
|
|
atl1e
|
|
atl1c
|
|
alx
|
|
|
|
# VirtIO drivers
|
|
virtio_net
|
|
virtio_scsi
|
|
virtio_blk
|
|
virtio_pci
|
|
|
|
# Tunnel and container support
|
|
tun
|
|
overlay
|
|
|
|
# Storage subsystem (essential only)
|
|
scsi_mod
|
|
sd_mod
|
|
|
|
# Control Groups (cgroups v1 and v2) - essential for container management
|
|
cgroup_pids
|
|
cgroup_freezer
|
|
cgroup_perf_event
|
|
cgroup_device
|
|
cgroup_cpuset
|
|
cgroup_bpf
|
|
cgroup_debug
|
|
memcg
|
|
blkio_cgroup
|
|
cpu_cgroup
|
|
cpuacct
|
|
hugetlb_cgroup
|
|
net_cls_cgroup
|
|
net_prio_cgroup
|
|
devices_cgroup
|