Disable network in `dockerRun`
AFAICT none of the callers (which all involve one of `linuxkit/mkimage-*`) have
any reason to hit the network.
@@ -28,7 +28,7 @@ func dockerRun(input io.Reader, output io.Writer, args ...string) error {
if err != nil {
return errors.New("Docker does not seem to be installed")
}
- args = append([]string{"run", "--rm", "-i"}, args...)
+ args = append([]string{"run", "--network=none", "--rm", "-i"}, args...)
cmd := exec.Command(docker, args...)
cmd.Stdin = input
cmd.Stdout = output
