Daniel J Walsh 80c0fceb24 Add support for --userns=nomap ...

From a security point of view, it would be nice to be able to map a
rootless usernamespace that does not use your own UID within the
container.

This would add protection against a hostile process escapping the
container and reading content in your homedir.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

2022-04-21 15:29:04 -04:00

..

kube

Remove error stutter

2022-03-25 21:47:04 -04:00

config_linux_cgo.go

go fmt: use go 1.18 conditional-build syntax

2022-03-18 09:11:53 +01:00

config_linux_nocgo.go

go fmt: use go 1.18 conditional-build syntax

2022-03-18 09:11:53 +01:00

config_linux_test.go

Add filepath glob support to --security-opt unmask

2021-05-04 14:40:43 -04:00

config_linux.go

Switch all calls to filepath.Walk to filepath.WalkDir

2022-03-27 07:18:25 -04:00

container_create.go

Merge pull request #13868 from cdoern/cloneSwap

2022-04-15 05:54:05 -04:00

container.go

healthcheck: set default healthcheck Interval if not specified in image

2022-04-20 16:12:45 +05:30

namespaces.go

Add support for --userns=nomap

2022-04-21 15:29:04 -04:00

oci.go

fix pod volume passing and alter infra inheritance

2022-03-29 11:10:46 -04:00

pod_create.go

podman create: building local pause image: do not read ignore files

2022-03-17 14:18:16 +01:00

ports_bench_test.go

fix a number of errcheck issues

2022-03-22 13:15:28 +01:00

ports_test.go

use libnetwork from c/common

2022-01-12 17:07:30 +01:00

ports.go

bump go module to version 4

2022-01-18 12:47:07 +01:00

security.go

Add support for ipc namespace modes "none, private, sharable"

2022-04-12 13:35:51 -04:00

storage.go

Remove error stutter

2022-03-25 21:47:04 -04:00

validate.go

bump go module to version 4

2022-01-18 12:47:07 +01:00