{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes-incubator/cri-o/issues/1434","repository_url":"https://api.github.com/repos/kubernetes-incubator/cri-o","labels_url":"https://api.github.com/repos/kubernetes-incubator/cri-o/issues/1434/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes-incubator/cri-o/issues/1434/comments","events_url":"https://api.github.com/repos/kubernetes-incubator/cri-o/issues/1434/events","html_url":"https://github.com/kubernetes-incubator/cri-o/pull/1434","id":303572064,"number":1434,"title":"[WIP] Add read-only flag","user":{"login":"umohnani8","id":29377163,"avatar_url":"https://avatars0.githubusercontent.com/u/29377163?v=4","gravatar_id":"","url":"https://api.github.com/users/umohnani8","html_url":"https://github.com/umohnani8","followers_url":"https://api.github.com/users/umohnani8/followers","following_url":"https://api.github.com/users/umohnani8/following{/other_user}","gists_url":"https://api.github.com/users/umohnani8/gists{/gist_id}","starred_url":"https://api.github.com/users/umohnani8/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/umohnani8/subscriptions","organizations_url":"https://api.github.com/users/umohnani8/orgs","repos_url":"https://api.github.com/users/umohnani8/repos","events_url":"https://api.github.com/users/umohnani8/events{/privacy}","received_events_url":"https://api.github.com/users/umohnani8/received_events","type":"User","site_admin":false},"labels":[{"id":484626496,"url":"https://api.github.com/repos/kubernetes-incubator/cri-o/labels/cncf-cla:%20yes","name":"cncf-cla: yes","color":"ededed","default":false},{"id":677262217,"url":"https://api.github.com/repos/kubernetes-incubator/cri-o/labels/size/M","name":"size/M","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":16,"created_at":"2018-03-08T17:51:28Z","updated_at":"2018-03-26T18:40:57Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/kubernetes-incubator/cri-o/pulls/1434","html_url":"https://github.com/kubernetes-incubator/cri-o/pull/1434","diff_url":"https://github.com/kubernetes-incubator/cri-o/pull/1434.diff","patch_url":"https://github.com/kubernetes-incubator/cri-o/pull/1434.patch"},"body":"Taking over @rhatdan PR https://github.com/kubernetes-incubator/cri-o/pull/1402/files\r\n\r\nAdd a read-only flag to the cri-o config.  This will force all containers\r\nrun on the system to run in readonly mode.  In order to make most containers\r\nwork this patch mounts a tmpfs on /run, /tmp and /var/tmp so that these directories can continue to be written to, but the rest of the file system will be\r\nread-only.  If the container needs to write to other locations, then volumes\r\nmust be mounted into the container.\r\n\r\nRunning in read-only mode increases the container security, since a hacked\r\ncontainer will not be able to overwrite existing code.\r\n\r\nSigned-off-by: Daniel J Walsh <dwalsh@redhat.com>\r\nSigned-off-by: umohnani8 <umohnani@redhat.com>"},"comment":{"url":"https://api.github.com/repos/kubernetes-incubator/cri-o/issues/comments/376269515","html_url":"https://github.com/kubernetes-incubator/cri-o/pull/1434#issuecomment-376269515","issue_url":"https://api.github.com/repos/kubernetes-incubator/cri-o/issues/1434","id":376269515,"user":{"login":"mheon","id":7735048,"avatar_url":"https://avatars3.githubusercontent.com/u/7735048?v=4","gravatar_id":"","url":"https://api.github.com/users/mheon","html_url":"https://github.com/mheon","followers_url":"https://api.github.com/users/mheon/followers","following_url":"https://api.github.com/users/mheon/following{/other_user}","gists_url":"https://api.github.com/users/mheon/gists{/gist_id}","starred_url":"https://api.github.com/users/mheon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mheon/subscriptions","organizations_url":"https://api.github.com/users/mheon/orgs","repos_url":"https://api.github.com/users/mheon/repos","events_url":"https://api.github.com/users/mheon/events{/privacy}","received_events_url":"https://api.github.com/users/mheon/received_events","type":"User","site_admin":false},"created_at":"2018-03-26T18:40:57Z","updated_at":"2018-03-26T18:40:57Z","author_association":"CONTRIBUTOR","body":"LGTM"}}
{"actor":{"display_login":"mheon"}}