{"action":"created","issue":{"url":"https://api.github.com/repos/coreos/rkt/issues/2222","repository_url":"https://api.github.com/repos/coreos/rkt","labels_url":"https://api.github.com/repos/coreos/rkt/issues/2222/labels{/name}","comments_url":"https://api.github.com/repos/coreos/rkt/issues/2222/comments","events_url":"https://api.github.com/repos/coreos/rkt/issues/2222/events","html_url":"https://github.com/coreos/rkt/pull/2222","id":136155555,"number":2222,"title":"kvm: Add support for capabilities limitation","user":{"login":"mstachowski","id":9694425,"avatar_url":"https://avatars.githubusercontent.com/u/9694425?v=3","gravatar_id":"","url":"https://api.github.com/users/mstachowski","html_url":"https://github.com/mstachowski","followers_url":"https://api.github.com/users/mstachowski/followers","following_url":"https://api.github.com/users/mstachowski/following{/other_user}","gists_url":"https://api.github.com/users/mstachowski/gists{/gist_id}","starred_url":"https://api.github.com/users/mstachowski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mstachowski/subscriptions","organizations_url":"https://api.github.com/users/mstachowski/orgs","repos_url":"https://api.github.com/users/mstachowski/repos","events_url":"https://api.github.com/users/mstachowski/events{/privacy}","received_events_url":"https://api.github.com/users/mstachowski/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/coreos/rkt/labels/area/security","name":"area/security","color":"bfe5bf"},{"url":"https://api.github.com/repos/coreos/rkt/labels/component/stage1","name":"component/stage1","color":"0052cc"},{"url":"https://api.github.com/repos/coreos/rkt/labels/kind/enhancement","name":"kind/enhancement","color":"c7def8"},{"url":"https://api.github.com/repos/coreos/rkt/labels/priority/P1","name":"priority/P1","color":"eb6420"},{"url":"https://api.github.com/repos/coreos/rkt/labels/reviewed/needs%20rework","name":"reviewed/needs rework","color":"bfdadc"},{"url":"https://api.github.com/repos/coreos/rkt/labels/technology/kvm","name":"technology/kvm","color":"d4c5f9"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/coreos/rkt/milestones/34","html_url":"https://github.com/coreos/rkt/milestones/v1.4.0","labels_url":"https://api.github.com/repos/coreos/rkt/milestones/34/labels","id":1651915,"number":34,"title":"v1.4.0","description":"","creator":{"login":"alban","id":27575,"avatar_url":"https://avatars.githubusercontent.com/u/27575?v=3","gravatar_id":"","url":"https://api.github.com/users/alban","html_url":"https://github.com/alban","followers_url":"https://api.github.com/users/alban/followers","following_url":"https://api.github.com/users/alban/following{/other_user}","gists_url":"https://api.github.com/users/alban/gists{/gist_id}","starred_url":"https://api.github.com/users/alban/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alban/subscriptions","organizations_url":"https://api.github.com/users/alban/orgs","repos_url":"https://api.github.com/users/alban/repos","events_url":"https://api.github.com/users/alban/events{/privacy}","received_events_url":"https://api.github.com/users/alban/received_events","type":"User","site_admin":false},"open_issues":44,"closed_issues":29,"state":"open","created_at":"2016-03-17T18:01:01Z","updated_at":"2016-04-13T15:04:15Z","due_on":"2016-04-13T22:00:00Z","closed_at":null},"comments":8,"created_at":"2016-02-24T19:03:13Z","updated_at":"2016-04-13T15:11:02Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/coreos/rkt/pulls/2222","html_url":"https://github.com/coreos/rkt/pull/2222","diff_url":"https://github.com/coreos/rkt/pull/2222.diff","patch_url":"https://github.com/coreos/rkt/pull/2222.patch"},"body":"By default kvm flavor has got enabled every capability inside pod.\r\nThis is normal systemd behavior, when its running as a init process\r\ninside VM. Coreos pod is started by systemd-nspawn, which apply some\r\ninitial capabilities by default.\r\n\r\nThis patch add support for restricted set of capabilities inside rkt-kvm\r\npod"},"comment":{"url":"https://api.github.com/repos/coreos/rkt/issues/comments/209499403","html_url":"https://github.com/coreos/rkt/pull/2222#issuecomment-209499403","issue_url":"https://api.github.com/repos/coreos/rkt/issues/2222","id":209499403,"user":{"login":"mstachowski","id":9694425,"avatar_url":"https://avatars.githubusercontent.com/u/9694425?v=3","gravatar_id":"","url":"https://api.github.com/users/mstachowski","html_url":"https://github.com/mstachowski","followers_url":"https://api.github.com/users/mstachowski/followers","following_url":"https://api.github.com/users/mstachowski/following{/other_user}","gists_url":"https://api.github.com/users/mstachowski/gists{/gist_id}","starred_url":"https://api.github.com/users/mstachowski/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mstachowski/subscriptions","organizations_url":"https://api.github.com/users/mstachowski/orgs","repos_url":"https://api.github.com/users/mstachowski/repos","events_url":"https://api.github.com/users/mstachowski/events{/privacy}","received_events_url":"https://api.github.com/users/mstachowski/received_events","type":"User","site_admin":false},"created_at":"2016-04-13T15:11:02Z","updated_at":"2016-04-13T15:11:02Z","body":"@jonboulle yes, it is"}}