mirror of
https://github.com/moby/moby.git
synced 2026-01-11 18:51:37 +00:00
0ae3f972ad
Remove unnecessary intermediate variables and helper functions when using slices.Contains. Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
39 lines
1.0 KiB
Go
39 lines
1.0 KiB
Go
package caps
|
|
|
|
import (
|
|
"context"
|
|
"slices"
|
|
"sync"
|
|
|
|
ccaps "github.com/containerd/containerd/v2/pkg/cap"
|
|
"github.com/containerd/log"
|
|
)
|
|
|
|
var initCapsOnce sync.Once
|
|
|
|
func initCaps() {
|
|
initCapsOnce.Do(func() {
|
|
rawCaps := ccaps.Known()
|
|
curCaps, err := ccaps.Current()
|
|
if err != nil {
|
|
log.G(context.TODO()).WithError(err).Error("failed to get capabilities from current environment")
|
|
allCaps = rawCaps
|
|
} else {
|
|
allCaps = curCaps
|
|
}
|
|
knownCaps = make(map[string]*struct{}, len(rawCaps))
|
|
for _, capName := range rawCaps {
|
|
// For now, we assume the capability is available if we failed to
|
|
// get the capabilities from the current environment. This keeps the
|
|
// old (pre-detection) behavior, and prevents creating containers with
|
|
// no capabilities. The OCI runtime or kernel may still refuse capa-
|
|
// bilities that are not available, and produce an error in that case.
|
|
if len(curCaps) > 0 && !slices.Contains(curCaps, capName) {
|
|
knownCaps[capName] = nil
|
|
continue
|
|
}
|
|
knownCaps[capName] = &struct{}{}
|
|
}
|
|
})
|
|
}
|