From 5ee23aaab53bf5b44eaaea7f8ef622e03639700f Mon Sep 17 00:00:00 2001 From: Matthew Heon Date: Wed, 12 Aug 2020 09:15:02 -0400 Subject: [PATCH] Change /sys/fs/cgroup/systemd mount to rprivate I used the wrong propagation first time around because I forgot that rprivate is the default propagation. Oops. Switch to rprivate so we're using the default. Downstream-patch: podman-1860506.patch Signed-off-by: Matthew Heon Signed-off-by: Valentin Rothberg --- libpod/container_internal_linux.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libpod/container_internal_linux.go b/libpod/container_internal_linux.go index 070b6d67c1..d078642c70 100644 --- a/libpod/container_internal_linux.go +++ b/libpod/container_internal_linux.go @@ -551,7 +551,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro Destination: "/sys/fs/cgroup/systemd", Type: "bind", Source: "/sys/fs/cgroup/systemd", - Options: []string{"bind", "nodev", "noexec", "nosuid"}, + Options: []string{"bind", "nodev", "noexec", "nosuid", "rprivate"}, } g.AddMount(systemdMnt) g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")