interface LinuxParametersProperty

Language	Type name
.NET	`Amazon.CDK.AWS.ECS.CfnDaemonTaskDefinition.LinuxParametersProperty`
Go	`github.com/aws/aws-cdk-go/awscdk/v2/awsecs#CfnDaemonTaskDefinition_LinuxParametersProperty`
Java	`software.amazon.awscdk.services.ecs.CfnDaemonTaskDefinition.LinuxParametersProperty`
Python	`aws_cdk.aws_ecs.CfnDaemonTaskDefinition.LinuxParametersProperty`
TypeScript	`aws-cdk-lib` » `aws_ecs` » `CfnDaemonTaskDefinition` » `LinuxParametersProperty`

The Linux-specific options that are applied to the container, such as Linux KernelCapabilities.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ecs as ecs } from 'aws-cdk-lib';
const linuxParametersProperty: ecs.CfnDaemonTaskDefinition.LinuxParametersProperty = {
  capabilities: {
    add: ['add'],
    drop: ['drop'],
  },
  devices: [{
    containerPath: 'containerPath',
    hostPath: 'hostPath',
    permissions: ['permissions'],
  }],
  initProcessEnabled: false,
  tmpfs: [{
    size: 123,

    // the properties below are optional
    containerPath: 'containerPath',
    mountOptions: ['mountOptions'],
  }],
};

Properties

Name	Type	Description
capabilities?	`IResolvable` `\|` `KernelCapabilitiesProperty`	The Linux capabilities to add or remove from the default Docker configuration for a container defined in the task definition.
devices?	`IResolvable` `\| (IResolvable` `\|` `DeviceProperty)[]`	Any host devices to expose to the container.
initProcessEnabled?	`boolean \|` `IResolvable`	Run an `init` process inside the container that forwards signals and reaps processes.
tmpfs?	`IResolvable` `\| (IResolvable` `\|` `TmpfsProperty)[]`	The container path, mount options, and size (in MiB) of the tmpfs mount.

capabilities?

Type: IResolvable | KernelCapabilitiesProperty (optional)

The Linux capabilities to add or remove from the default Docker configuration for a container defined in the task definition.

For more detailed information about these Linux capabilities, see the capabilities(7) Linux manual page. The following describes how Docker processes the Linux capabilities specified in the add and drop request parameters. For information about the latest behavior, see Docker Compose: order of cap_drop and cap_add in the Docker Community Forum.

When the container is a privleged container, the container capabilities are all of the default Docker capabilities. The capabilities specified in the add request parameter, and the drop request parameter are ignored.
When the add request parameter is set to ALL, the container capabilities are all of the default Docker capabilities, excluding those specified in the drop request parameter.
When the drop request parameter is set to ALL, the container capabilities are the capabilities specified in the add request parameter.
When the add request parameter and the drop request parameter are both empty, the capabilities the container capabilities are all of the default Docker capabilities.
The default is to first drop the capabilities specified in the drop request parameter, and then add the capabilities specified in the add request parameter.

devices?

Type: IResolvable | (IResolvable | DeviceProperty)[] (optional)

Any host devices to expose to the container.

This parameter maps to Devices in the docker container create command and the --device option to docker run. If you're using tasks that use the Fargate launch type, the devices parameter isn't supported.

initProcessEnabled?

Type: boolean | IResolvable (optional)

Run an init process inside the container that forwards signals and reaps processes.

This parameter maps to the --init option to docker run. This parameter requires version 1.25 of the Docker Remote API or greater on your container instance. To check the Docker Remote API version on your container instance, log in to your container instance and run the following command: sudo docker version --format '{{.Server.APIVersion}}'

tmpfs?

Type: IResolvable | (IResolvable | TmpfsProperty)[] (optional)

The container path, mount options, and size (in MiB) of the tmpfs mount.

This parameter maps to the --tmpfs option to docker run. If you're using tasks that use the Fargate launch type, the tmpfs parameter isn't supported.

AWS CDK

2.254.0