Config for runc nginx

config.json

{
	"version": "pre-draft",
	"platform": {
		"os": "linux",
		"arch": "amd64"
	},
	"process": {
		"terminal": false,
		"user": {
			"uid": 0,
			"gid": 0,
			"additionalGids": null
		},
		"args": [
			"nginx", "-g", "daemon off;"
		],
		"env": [
			"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
			"TERM=xterm"
		],
		"cwd": ""
	},
	"root": {
		"path": "/var/lib/containers/nginx",
		"readonly": false
	},
	"hostname": "shell",
	"mounts": [
		{
			"type": "proc",
			"source": "proc",
			"destination": "/proc",
			"options": ""
		},
		{
			"type": "tmpfs",
			"source": "tmpfs",
			"destination": "/dev",
			"options": "nosuid,strictatime,mode=755,size=65536k"
		},
		{
			"type": "devpts",
			"source": "devpts",
			"destination": "/dev/pts",
			"options": "nosuid,noexec,newinstance,ptmxmode=0666,mode=0620,gid=5"
		},
		{
			"type": "tmpfs",
			"source": "shm",
			"destination": "/dev/shm",
			"options": "nosuid,noexec,nodev,mode=1777,size=65536k"
		},
		{
			"type": "mqueue",
			"source": "mqueue",
			"destination": "/dev/mqueue",
			"options": "nosuid,noexec,nodev"
		},
		{
			"type": "sysfs",
			"source": "sysfs",
			"destination": "/sys",
			"options": "nosuid,noexec,nodev"
		},
		{
			"type": "cgroup",
			"source": "cgroup",
			"destination": "/sys/fs/cgroup",
			"options": "nosuid,noexec,nodev,relatime,ro"
		}
	],
	"hooks": {
		"prestart": null,
		"poststop": null
	},
	"linux": {
		"uidMappings": null,
		"gidMappings": null,
		"rlimits": [
			{
				"type": 7,
				"hard": 1024,
				"soft": 1024
			}
		],
		"sysctl": null,
		"resources": {
			"disableOOMKiller": false,
			"memory": {
				"limit": 0,
				"reservation": 0,
				"swap": 0,
				"kernel": 0,
				"swappiness": -1
			},
			"cpu": {
				"shares": 0,
				"quota": 0,
				"period": 0,
				"realtimeRuntime": 0,
				"realtimePeriod": 0,
				"cpus": "",
				"mems": ""
			},
			"blockIO": {
				"blkioWeight": 0,
				"blkioWeightDevice": "",
				"blkioThrottleReadBpsDevice": "",
				"blkioThrottleWriteBpsDevice": "",
				"blkioThrottleReadIopsDevice": "",
				"blkioThrottleWriteIopsDevice": ""
			},
			"hugepageLimits": null,
			"network": {
				"classId": "",
				"priorities": null
			}
		},
		"namespaces": [
			{
				"type": "pid",
				"path": ""
			},
			{
				"type": "ipc",
				"path": ""
			},
			{
				"type": "uts",
				"path": ""
			},
			{
				"type": "mount",
				"path": ""
			}
		],
		"capabilities": [
			"CHOWN",
			"DAC_OVERRIDE",
			"FSETID",
			"FOWNER",
			"MKNOD",
			"NET_RAW",
			"SETGID",
			"SETUID",
			"SETFCAP",
			"SETPCAP",
			"NET_BIND_SERVICE",
			"SYS_CHROOT",
			"KILL",
			"AUDIT_WRITE"
		],
		"devices": [
			{
				"type": 99,
				"path": "/dev/null",
				"major": 1,
				"minor": 3,
				"permissions": "rwm",
				"fileMode": 438,
				"uid": 0,
				"gid": 0
			},
			{
				"type": 99,
				"path": "/dev/random",
				"major": 1,
				"minor": 8,
				"permissions": "rwm",
				"fileMode": 438,
				"uid": 0,
				"gid": 0
			},
			{
				"type": 99,
				"path": "/dev/full",
				"major": 1,
				"minor": 7,
				"permissions": "rwm",
				"fileMode": 438,
				"uid": 0,
				"gid": 0
			},
			{
				"type": 99,
				"path": "/dev/tty",
				"major": 5,
				"minor": 0,
				"permissions": "rwm",
				"fileMode": 438,
				"uid": 0,
				"gid": 0
			},
			{
				"type": 99,
				"path": "/dev/zero",
				"major": 1,
				"minor": 5,
				"permissions": "rwm",
				"fileMode": 438,
				"uid": 0,
				"gid": 0
			},
			{
				"type": 99,
				"path": "/dev/urandom",
				"major": 1,
				"minor": 9,
				"permissions": "rwm",
				"fileMode": 438,
				"uid": 0,
				"gid": 0
			}
		],
		"apparmorProfile": "",
		"selinuxProcessLabel": "",
		"seccomp": {
			"defaultAction": "SCMP_ACT_ALLOW",
			"syscalls": []
		},
		"rootfsPropagation": ""
	}
}