mirror of
https://github.com/containers/podman.git
synced 2025-10-20 20:54:45 +08:00
Change /sys/fs/cgroup/systemd mount to rprivate
I used the wrong propagation first time around because I forgot that rprivate is the default propagation. Oops. Switch to rprivate so we're using the default. Downstream-patch: podman-1860506.patch Signed-off-by: Matthew Heon <mheon@redhat.com> Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
This commit is contained in:

committed by
Valentin Rothberg

parent
7286c00ace
commit
5ee23aaab5
@ -551,7 +551,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro
|
|||||||
Destination: "/sys/fs/cgroup/systemd",
|
Destination: "/sys/fs/cgroup/systemd",
|
||||||
Type: "bind",
|
Type: "bind",
|
||||||
Source: "/sys/fs/cgroup/systemd",
|
Source: "/sys/fs/cgroup/systemd",
|
||||||
Options: []string{"bind", "nodev", "noexec", "nosuid"},
|
Options: []string{"bind", "nodev", "noexec", "nosuid", "rprivate"},
|
||||||
}
|
}
|
||||||
g.AddMount(systemdMnt)
|
g.AddMount(systemdMnt)
|
||||||
g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
|
g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
|
||||||
|
Reference in New Issue
Block a user