spiegel_podman/pkg/specgen
Giuseppe Scrivano 1d76a166c6 oci: bind mount /sys with --userns=(auto|pod:)
when using --userns=auto or --userns=pod, we should bind mount /sys
from the host instead of creating a new /sys in the container,
otherwise we rely on the fallback provided by crun, which might not be
available in other runtimes.

Also, in the last version of crun the fallback is stricter than it
used to be before and it uses a recursive bind mount through the new
mount API.  That can be missing on old kernel.

Closes: https://github.com/containers/crun/issues/1131

[NO NEW TESTS NEEDED] to trigger the failure, we need a specific
combination of kernel, libc and OCI runtime.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-02-07 14:40:56 -05:00
..
generate oci: bind mount /sys with --userns=(auto|pod:) 2023-02-07 14:40:56 -05:00
config_unsupported.go pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
container_validate.go kube play: sd-notify integration 2022-08-10 21:12:39 +02:00
namespaces.go libpod: remove CNI word were no longer applicable 2022-12-16 14:20:14 +01:00
namespaces_test.go libpod: Add pasta networking mode 2022-11-08 00:16:35 +01:00
pod_validate.go libpod: Add pasta networking mode 2022-11-08 00:16:35 +01:00
podspecgen.go libpod: Add pasta networking mode 2022-11-08 00:16:35 +01:00
resources_freebsd.go specgen/generate: Factor out setting resource limits from CompleteSpec 2022-09-08 08:24:18 +01:00
resources_linux.go specgen/generate: Factor out setting resource limits from CompleteSpec 2022-09-08 08:24:18 +01:00
specgen.go Add containers.conf read-only flag support 2022-12-22 11:57:28 -05:00
specgen_test.go fix test 2021-10-11 17:41:58 +08:00
utils.go implement podman update 2022-09-01 13:02:01 -04:00
utils_linux.go implement podman update 2022-09-01 13:02:01 -04:00
volumes.go add support for subpath in play kube for named volumes 2022-12-12 09:54:00 -05:00
winpath.go pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
winpath_linux.go Implements Windows volume/mount support 2022-04-25 13:52:27 -05:00
winpath_unsupported.go Implements Windows volume/mount support 2022-04-25 13:52:27 -05:00
winpath_windows.go Implements Windows volume/mount support 2022-04-25 13:52:27 -05:00