spiegel_podman/pkg/specgen
Matthew Heon 0cbd322590 Ensure that --userns=keep-id sets user in config
One of the side-effects of the `--userns=keep-id` command is
switching the default user of the container to the UID of the
user running Podman (though this can still be overridden by the
`--user` flag). However, it did this by setting the UID and GID
in the OCI spec, and not by informing Libpod of its intention to
switch users via the `WithUser()` option. Because of this, a lot
of the code that should have triggered when the container ran
with a non-root user was not triggering. In the case of the issue
that this fixed, the code to remove capabilities from non-root
users was not triggering. Adjust the keep-id code to properly
inform Libpod of our intention to use a non-root user to fix
this.

Also, fix an annoying race around short-running exec sessions
where Podman would always print a warning that the exec session
had already stopped.

Fixes #9919

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2021-04-16 13:05:11 -04:00
..
generate Ensure that --userns=keep-id sets user in config 2021-04-16 13:05:11 -04:00
config_unsupported.go bump go module to v3 2021-02-22 09:03:51 +01:00
container_validate.go bump go module to v3 2021-02-22 09:03:51 +01:00
namespaces.go Correct json field name 2021-03-29 11:58:52 -04:00
pod_validate.go bump go module to v3 2021-02-22 09:03:51 +01:00
podspecgen.go Add support for slirp network for pods 2020-09-25 21:34:23 -04:00
specgen.go Implement Secrets 2021-02-09 09:13:21 -05:00
volumes.go Add U volume flag to chown source volumes 2021-02-22 22:55:19 -06:00