Giuseppe Scrivano aa0d4b2661 oci: bind mount /sys with --userns=(auto|pod:) ... when using --userns=auto or --userns=pod, we should bind mount /sys from the host instead of creating a new /sys in the container, otherwise we rely on the fallback provided by crun, which might not be available in other runtimes. Also, in the last version of crun the fallback is stricter than it used to be before and it uses a recursive bind mount through the new mount API. That can be missing on old kernel. Closes: https://github.com/containers/crun/issues/1131 [NO NEW TESTS NEEDED] to trigger the failure, we need a specific combination of kernel, libc and OCI runtime. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>		2023-02-03 17:16:19 +01:00
..
annotations	Remove ReservedAnnotations from kube generate specification	2023-01-18 08:46:24 -05:00
api	Merge pull request #17114 from rhatdan/devices	2023-01-26 14:32:19 -05:00
auth	[CI:DOCS] Fix spelling and typos	2022-11-19 16:26:00 +01:00
autoupdate	bump golangci-lint to v1.49.0	2022-10-17 09:19:41 +02:00
bindings	Log data that we failed to unmarshal	2023-01-30 18:13:31 +01:00
channel	bump golangci-lint to v1.50.1	2022-12-15 13:39:56 +01:00
checkpoint	checkpoint restore: fix --ignore-static-ip/mac	2022-12-12 18:34:49 +01:00
copy	pkg: switch to golang native error wrapping	2022-07-08 08:54:47 +02:00
criu	deps: bump go-criu to v6	2022-11-01 13:57:24 +05:30
ctime	Replace deprecated ioutil	2022-09-20 15:34:27 -04:00
domain	Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)	2023-01-27 16:47:32 +01:00
env	[CI:DOCS] Fix spelling and typos	2022-11-19 16:26:00 +01:00
errorhandling	libpod/runtime: switch to golang native error wrapping	2022-07-04 15:39:00 +02:00
inspect	pkg/inspect: remove unused ImageResult type	2022-05-24 16:07:39 +02:00
k8s.io	Merge pull request #16560 from eriksjolund/fix_typo_a_an	2022-11-20 17:04:36 -05:00
lookup	bump golangci-lint to v1.50.1	2022-12-15 13:39:56 +01:00
machine	Merge pull request #17269 from n1hility/add-comment	2023-01-30 06:35:28 -05:00
namespaces	libpod: Add pasta networking mode	2022-11-08 00:16:35 +01:00
parallel	Fix stutters	2022-09-10 07:52:00 -04:00
ps	DB: make loading container states optional	2023-01-26 10:20:38 +01:00
rctl	pkg/rctl: Remove unused cgo dependency	2022-10-31 15:13:48 +00:00
rootless	rootless: rename auth-scripts to preexec-hooks	2023-01-17 10:58:46 +01:00
rootlessport	go fmt: use go 1.18 conditional-build syntax	2022-03-18 09:11:53 +01:00
seccomp	pkg: switch to golang native error wrapping	2022-07-08 08:54:47 +02:00
selinux	Fix SELinux functions names to not be repetitive	2020-04-23 15:57:34 -04:00
servicereaper	go fmt: use go 1.18 conditional-build syntax	2022-03-18 09:11:53 +01:00
signal	Run codespell on code	2022-11-04 10:57:41 -04:00
specgen	oci: bind mount /sys with --userns=(auto|pod:)	2023-02-03 17:16:19 +01:00
specgenutil	Remove ReservedAnnotations from kube generate specification	2023-01-18 08:46:24 -05:00
systemd	quadlet: Add device support for .volume files	2023-01-26 14:46:57 +02:00
terminal	podman ssh work, using new c/common interface	2022-08-09 14:00:58 -04:00
timetype	bump golangci-lint to v1.49.0	2022-10-17 09:19:41 +02:00
trust	pkg/trust: Take the default policy path from c/common/pkg/config	2022-11-25 10:14:15 +00:00
util	libpod: allow userns=keep-id for root	2023-02-03 12:44:30 +01:00