mirror of
https://github.com/containers/podman.git
synced 2025-06-25 20:26:51 +08:00
Merge pull request #7281 from mheon/ensure_mountprop_systemd
Ensure correct propagation for cgroupsv1 systemd cgroup
This commit is contained in:
@ -626,7 +626,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro
|
|||||||
Destination: "/sys/fs/cgroup/systemd",
|
Destination: "/sys/fs/cgroup/systemd",
|
||||||
Type: "bind",
|
Type: "bind",
|
||||||
Source: "/sys/fs/cgroup/systemd",
|
Source: "/sys/fs/cgroup/systemd",
|
||||||
Options: []string{"bind", "nodev", "noexec", "nosuid"},
|
Options: []string{"bind", "nodev", "noexec", "nosuid", "rslave"},
|
||||||
}
|
}
|
||||||
g.AddMount(systemdMnt)
|
g.AddMount(systemdMnt)
|
||||||
g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
|
g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
|
||||||
|
Reference in New Issue
Block a user