crun

USE флаги

• bpf - Enable in Kernel, eBPF (enhanced Berkley Packet Filter) support for managing device controllers.
• caps - Use Linux capabilities library to control privilege
• criu - Enable CRIU based checkpoint/restore support
• seccomp - Enable seccomp (secure computing mode) to perform system call filtering at runtime to increase security of programs
• selinux - !!internal use only!! Security Enhanced Linux support, this must be set by the selinux profile or breakage will occur
• static-libs - Build static versions of dynamic libraries as well
• systemd - Enable use of systemd-specific libraries and features like socket activation or session tracking