- What’s a restricted worker model?
A shared.infra hatchery can launch all worker models, except ‘restricted’ worker models.
Use case: users can launch their own hatchery. To use their worker models only with their hatchery, they have to set worker model as ‘restricted’.
为什么需要使用 restricted mode？因为 CDS build 是基于 docker in docker 方式，在 docker 里面执行 docker 命令，需要依赖 –privileged 权限(启动 docker deamon 需要)。
特别注意：–privileged is implemented on swarm hatchery only