* Janitor doen't need privileged mode nor networking
- remove "privileged: true" property
- add "net: none" property
The cleanup tasks runs entirely without networking on /var/run/docker.sock. The calling process can access the docker so it does not need to have privileged mode.
Signed-off-by: Mathias Kaufmann <me@stei.gr>
* Added boolean question for privileged mode.
Signed-off-by: Mathias Kaufmann <me@stei.gr>
Default setting to keep ALL containers protects Rancher templates where
run-once containers are used; in general Rancher will remove its own
containers where necessary.
User of Shell Wildcards allows more flexibility when specifying images to be
kept during the sweep.
