opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-06-23 10:38:20 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #8166 from rhatdan/unbindable

Browse Source 
Allow users to mount with unbindable flag
This commit is contained in:
OpenShift Merge Robot
2020-11-02 18:19:39 +01:00
committed by GitHub
parent 7375a55757 3ee44d942e
commit 8dfbdb561b
7 changed files with 24 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
libpod/container_inspect.go
View File

@ -270,7 +270,7 @@ func parseMountOptionsForInspect(options []string, mount *define.InspectMount) {
isRW = false
case "rw":
// Do nothing, silently discard
case "shared", "slave", "private", "rshared", "rslave", "rprivate":
case "shared", "slave", "private", "rshared", "rslave", "rprivate", "unbindable", "runbindable":
mountProp = opt
case "z", "Z":
zZ = opt

2
libpod/container_internal_linux.go
View File

@ -344,7 +344,7 @@ func (c *Container) generateSpec(ctx context.Context) (*spec.Spec, error) {
Type: "bind",
Source: srcPath,
Destination: dstPath,
Options: []string{"bind", "private"},
Options: []string{"bind", "rprivate"},
}
if c.IsReadOnly() && dstPath != "/dev/shm" {
newMount.Options = append(newMount.Options, "ro", "nosuid", "noexec", "nodev")