spiegel_podman/pkg/specgen/generate
Matthew Heon 46183cf873 Ignore containers.conf sysctls when sharing namespaces
The existing code prevents containers.conf default sysctls from
being added if the container uses a host namespace. This patch
expands that to not just host namespaces, but also *shared*
namespaces - so we never modify another container's (or a pod's)
namespaces without being explicitly directed to do so by the
user.

Signed-off-by: Matthew Heon <mheon@redhat.com>
2020-12-10 11:43:59 -05:00
..
kube Merge pull request #8661 from rhatdan/codespell 2020-12-09 09:52:20 -05:00
config_linux.go security: honor systempaths=unconfined for ro paths 2020-12-09 19:26:23 +01:00
config_linux_cgo.go Remove excessive error wrapping 2020-10-05 15:30:37 -07:00
config_linux_nocgo.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container.go Ensure that --net=host/pod/container/none warn with -p 2020-11-04 13:42:58 -05:00
container_create.go container create: do not clear image name 2020-12-07 11:58:10 +01:00
namespaces.go Support --network=default as if it was private 2020-12-02 18:38:35 -05:00
oci.go Merge pull request #8561 from mheon/fix_gating 2020-12-07 11:38:18 -05:00
pod_create.go Add support for slirp network for pods 2020-09-25 21:34:23 -04:00
ports.go Correct port range logic for port generation 2020-12-08 16:23:14 -05:00
security.go Ignore containers.conf sysctls when sharing namespaces 2020-12-10 11:43:59 -05:00
storage.go Document containers.conf settings for remote connections 2020-11-19 14:48:10 -05:00
validate.go Merge pull request #8197 from giuseppe/check-cgroupv2-swap-enabled 2020-10-31 11:40:07 +01:00