[MESOS-9035] Implement `linux/seccomp` isolator

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Done
• Fix Version/s: 1.8.0
• Component/s: containerization
• Labels: mesosphere
• Epic Link: Seccomp isolator in Mesos containerizer
• Sprint: Containerization RI10 Spr 38
• Story Points: 5
• Assignee: Andrei Budnik
• Reporter: Andrei Budnik
• Shepherd: Gilbert Song
• Created: 28/Jun/18 16:30
• Updated: 28/Jan/19 07:57
• Resolved: 28/Jan/19 07:57

Description

The main purpose of this isolator is to prepare `ContainerSeccompProfile` for a containerizer launcher. `ContainerSeccompProfile` message is generated by the isolator from a JSON-file that contains declaration of Seccomp filter rules.

In addition, seccomp isolator should check for a Seccomp support by the Linux kernel.