<p dir="auto">Starting from v1.10 docker daemon will run with a <a href="https://github.com/docker/docker/blob/master/docs/security/seccomp.md">restrictive seccomp profile</a> turned on by default.</p>
<p dir="auto">Users will have to include a custom seccomp profile in addition to capabilities.</p>
<p dir="auto">Until we figure out a sane way to add support for seccomp, I propose disabling (<code class="notranslate">unconfined</code>) seccomp profiles by default.<br>
This will allow users to upgrade to docker v1.10 seamlessly.</p>
<p dir="auto">cc @kubernetes/goog-node <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/bgrant0607/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/bgrant0607">@bgrant0607</a></p>
<p dir="auto">Failed 1 times in the last 30 runs.</p>
<p dir="auto"><a href="http://kubekins.dls.corp.google.com/view/Critical%20Builds/job/kubernetes-e2e-gce/8836/testReport/junit/%28root%29/Kubernetes%20e2e%20suite/Job_should_run_a_job_to_completion_when_tasks_sometimes_fail_and_are_locally_restarted/" rel="nofollow">http://kubekins.dls.corp.google.com/view/Critical%20Builds/job/kubernetes-e2e-gce/8836/testReport/junit/%28root%29/Kubernetes%20e2e%20suite/Job_should_run_a_job_to_completion_when_tasks_sometimes_fail_and_are_locally_restarted/</a></p>