34.6. Changes to support running containers in unprivileged mode
Previous versions of images required running in privileged mode. To remove this restriction, container config and ports were changed.
- clair-jwt config has moved from /config to /clair/config
- You must update references to additional files, such as certificates, in clair-jwt’s config.
- The quay HTTP port is now 8080. The HTTPS port is 8443.
- If you use the proxy port on quay, it has been moved to 7443.
The move to a RHEL base image means the certificate install path has changed to /etc/pki/ca-trust/source/anchors. Examples running the images have been updated to reflect this.