spiegel_podman/pkg
Paul Holzinger 3ff47748de
Fix possible rootless netns cleanup race
rootlessNetNS.Cleanup() has an issue with how it detects if cleanup
is needed, reading the container state is not good ebough because
containers are first stopped and than cleanup will be called. So at one
time two containers could wait for cleanup but the second one will fail
because the first one triggered already the cleanup thus making rootless
netns unavailable for the second container resulting in an teardown
error. Instead of checking the container state we need to check the
netns state.

Secondly, podman unshare --rootless-netns should not do the cleanup.
This causes more issues than it is worth fixing. Users also might want
to use this to setup the namespace in a special way. If unshare also
cleans this up right away we cannot do this.

[NO NEW TESTS NEEDED]

Fixes #12459

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-12-01 19:19:44 +01:00
..
annotations Spelling 2020-12-22 13:34:31 -05:00
api Merge pull request #12414 from flouthoc/api-allow-secrets 2021-11-30 19:29:33 +01:00
auth standardize logrus messages to upper case 2021-09-22 15:29:34 -04:00
autoupdate vendor c/common@main 2021-09-20 15:07:41 +02:00
bindings podman-remote: copy secret to contextdir is absolute path on host 2021-11-30 14:19:29 +05:30
cgroups cgroups: use SessionBusPrivateNoAutoStartup 2021-10-26 21:05:45 +02:00
channel channel: simplify implementation 2021-05-06 11:51:15 +02:00
checkpoint Use same runtime to restore a container as during checkpointing 2021-11-19 17:46:06 +00:00
copy support container to container copy 2021-07-27 15:32:23 +02:00
criu Support checkpoint/restore with pods 2021-07-27 16:10:44 +02:00
ctime Re-add int64 casts for ctime 2019-07-23 15:43:40 -04:00
domain Fix possible rootless netns cleanup race 2021-12-01 19:19:44 +01:00
env Generate kube should'd add podman default environment vars 2021-09-21 09:03:31 -04:00
errorhandling Handle HTTP 409 error messages properly for Pod actions 2021-11-02 12:28:52 +01:00
hooks [CI:DOCS] oci-hooks.5.md: fixup section in header 2021-10-10 08:16:42 -04:00
inspect bump go module to v3 2021-02-22 09:03:51 +01:00
kubeutils Globally replace http:// with https:// 2021-08-27 06:14:46 -04:00
lookup Enable whitespace linter 2021-02-11 23:01:56 +01:00
machine systemd: replace multi-user with default.target 2021-11-30 14:37:25 +01:00
namespaces [NO TESTS NEEDED] Shrink the size of podman-remote 2021-03-29 09:49:45 -04:00
netns standardize logrus messages to upper case 2021-09-22 15:29:34 -04:00
network Split libpod/network package 2021-03-15 14:01:52 +01:00
parallel bump go module to v3 2021-02-22 09:03:51 +01:00
ps Ensure podman ps --sync functions 2021-10-06 11:19:32 -04:00
resolvconf bump go module to v3 2021-02-22 09:03:51 +01:00
rootless Merge pull request #12325 from giuseppe/rootless-use-auto-cleanup 2021-11-17 20:20:29 +01:00
rootlessport libpod: deduplicate ports in db 2021-10-27 18:59:56 +02:00
seccomp Spelling 2020-12-22 13:34:31 -05:00
selinux Fix SELinux functions names to not be repetitive 2020-04-23 15:57:34 -04:00
servicereaper standardize logrus messages to upper case 2021-09-22 15:29:34 -04:00
signal Fix build for mips architecture follow-up 2021-01-07 15:04:22 +01:00
specgen Support EXPOSE with port ranges 2021-11-20 19:24:21 -05:00
specgenutil Fix netavark error handling and teardown issue 2021-11-22 17:49:55 +01:00
systemd systemd: replace multi-user with default.target 2021-11-30 14:37:25 +01:00
terminal Fix #11444: remote breaks with stdout redirection 2021-09-13 17:42:48 +03:00
timetype make lint: enable gocritic 2020-01-13 14:27:02 +01:00
trust standardize logrus messages to upper case 2021-09-22 15:29:34 -04:00
util filter: use filepath.Match to maintain consistency with other pattern 2021-11-19 22:07:47 +05:30