spiegel_podman/pkg
Giuseppe Scrivano afd0818326
rootless: automatically create a systemd scope
when running in rootless mode and using systemd as cgroup manager
create automatically a systemd scope when the user doesn't own the
current cgroup.

This solves a couple of issues:

on cgroup v2 it is necessary that a process before it can moved to a
different cgroup tree must be in a directory owned by the unprivileged
user.  This is not always true, e.g. when creating a session with su
-l.

Closes: https://github.com/containers/libpod/issues/3937

Also, for running systemd in a container it was before necessary to
specify "systemd-run --scope --user podman ...", now this is done
automatically as part of this PR.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2019-09-12 08:35:26 +02:00
..
adapter Merge pull request #3896 from mheon/volume_lookup 2019-09-09 21:48:30 +02:00
annotations Add ContainerManager annotation to created containers 2019-09-10 09:37:14 +02:00
apparmor golangci-lint round #3 2019-07-21 14:22:39 -05:00
cgroups rootless: automatically create a systemd scope 2019-09-12 08:35:26 +02:00
channelwriter account for varlink calls that dont use more 2019-07-10 08:50:05 -05:00
criu Add helper function to read out CRIU version 2018-10-23 12:52:03 +02:00
ctime Re-add int64 casts for ctime 2019-07-23 15:43:40 -04:00
errorhandling first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
hooks Running Podman with a nonexistent hooks dir is nonfatal 2019-08-13 15:05:42 -04:00
inspect Begin to break up pkg/inspect 2019-06-03 15:54:53 -04:00
kubeutils Remove dependency on kubernetes 2018-03-27 21:55:33 +00:00
logs first pass of corrections for golangci-lint 2019-07-10 15:52:17 -05:00
lookup pkg/lookup: Return ID-only pointers on ErrNo*Entries 2018-12-04 14:46:43 -08:00
namespaces namespaces: fix Container() call 2019-08-07 13:11:08 -04:00
netns Revert "rootless: Rearrange setup of rootless containers" 2019-08-06 09:51:38 -05:00
network podman network create 2019-09-09 09:32:43 -05:00
registrar Update registrar unit tests to match them of cri-o 2019-04-04 08:53:32 +02:00
registries Use the logical registry location instead of the physical one in (podman info) 2019-06-14 15:46:17 +02:00
resolvconf Use host's resolv.conf if no network namespace enabled 2018-11-27 15:28:09 -05:00
rootless pkg/util: use rootless function to read additional users 2019-09-03 14:38:08 +02:00
spec Add support for launching containers without CGroups 2019-09-10 10:52:37 -04:00
sysinfo golangci-lint round #3 2019-07-21 14:22:39 -05:00
systemdgen generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
tracing trivial cleanups from golang 2019-07-03 15:41:33 -05:00
trust trivial cleanups from golang 2019-07-03 15:41:33 -05:00
util Fixup util.GetRootlessConfigHomeDir permission requirements 2019-09-09 15:17:42 +02:00
varlinkapi Add function for looking up volumes by partial name 2019-09-09 12:06:10 -04:00