Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

linux: new mount option "idmap" #780

Merged
merged 6 commits into from
Nov 16, 2021
Merged

linux: new mount option "idmap" #780

merged 6 commits into from
Nov 16, 2021

Commits on Nov 15, 2021

  1. tests: update podman 

    Signed-off-by: Giuseppe Scrivano <[email protected]>
    @giuseppe
    giuseppe committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    a01a03a View commit details
    Browse the repository at this point in the history

  2. linux: silence warning 

    Signed-off-by: Giuseppe Scrivano <[email protected]>
    @giuseppe
    giuseppe committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    4523486 View commit details
    Browse the repository at this point in the history

  3. linux: generalize opening mounts earlier 

    generalize the mechanism of opening mount targets earlier.  This will
be necessary later to allow creating idmapped mounts before entering
the user namespace.

Signed-off-by: Giuseppe Scrivano <[email protected]>
    @giuseppe
    giuseppe committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    a5a2ca5 View commit details
    Browse the repository at this point in the history

  4. linux: provide cleanup private data callback 

    prevent leaks on errors since it is called when the container is
freed.

Signed-off-by: Giuseppe Scrivano <[email protected]>
    @giuseppe
    giuseppe committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    b5fc60e View commit details
    Browse the repository at this point in the history

  5. linux: add function to send mounts from the host 

    preparation patch to enable the creation of mounts before joining or
creating a user namespace.  This is needed for creating idmapped
mounts that are usable from the container user namespace.

Signed-off-by: Giuseppe Scrivano <[email protected]>
    @giuseppe
    giuseppe committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    02938ac View commit details
    Browse the repository at this point in the history

  6. linux: new mount option "idmap" 

    when the "idmap" mount option is specified, create the mount outside
of the container user namespace context and pass the mount fd to the
container init process.

Signed-off-by: Giuseppe Scrivano <[email protected]>
    @giuseppe
    giuseppe committed Nov 15, 2021
    Configuration menu
    Copy the full SHA
    827b873 View commit details
    Browse the repository at this point in the history