podman

mirror of https://github.com/containers/podman.git synced 2025-10-19 20:23:08 +08:00

Files

Giuseppe Scrivano 1d76a166c6 oci: bind mount /sys with --userns=(auto|pod:)

when using --userns=auto or --userns=pod, we should bind mount /sys
from the host instead of creating a new /sys in the container,
otherwise we rely on the fallback provided by crun, which might not be
available in other runtimes.

Also, in the last version of crun the fallback is stricter than it
used to be before and it uses a recursive bind mount through the new
mount API.  That can be missing on old kernel.

Closes: https://github.com/containers/crun/issues/1131

[NO NEW TESTS NEEDED] to trigger the failure, we need a specific
combination of kernel, libc and OCI runtime.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2023-02-07 14:40:56 -05:00

generate

oci: bind mount /sys with --userns=(auto|pod:)

2023-02-07 14:40:56 -05:00

config_unsupported.go

pkg: switch to golang native error wrapping

2022-07-08 08:54:47 +02:00

container_validate.go

kube play: sd-notify integration

2022-08-10 21:12:39 +02:00

namespaces_test.go

libpod: Add pasta networking mode