spiegel_podman/pkg/systemd
Alexander Larsson 285d6c9ba0 quadlet: Rework uid/gid remapping
Quadlet was doing some custom handling of uid/gid remapping, originating
from pre --userns=auto support, including its own user for getting subuids
which kinda conflicts with the "container" user used for that.

This drops all the old support for id remapping in favour of a new set
of keys that more directly map to the podman run options.

We have essentially 3 modes now:

```
RemapUsers=manual
RemapUid=0:10000:10
RemapUid=10:20000:10
RemapGid=0:10000:10
RemapGid=10:20000:10
```

This maps to --uidmap and --gidmap options.

```
RemapUsers=auto
```

This maps to --userns=auto. But you can additionally specify RemapUid,
RemapGid and RemapUidSize which gets applied as options to the
--userns podman option.

```
RemapUsers=keep-id
```
This maps to --userns=keep-id and only works for user units.

Signed-off-by: Alexander Larsson <alexl@redhat.com>
2022-11-21 18:02:19 +01:00
..
define generate systemd: handle --restart 2021-09-07 13:58:11 +02:00
generate Fix language. Mostly spelling a -> an 2022-11-20 19:41:06 +01:00
notifyproxy notifyproxy: fix container watcher 2022-10-25 10:12:29 +02:00
parser [CI:DOCS] Fix spelling and typos 2022-11-19 16:26:00 +01:00
quadlet quadlet: Rework uid/gid remapping 2022-11-21 18:02:19 +01:00
activation.go pkg/systemd: don't require LISTEN_FDNAMES for socket activation 2021-06-24 09:01:39 -06:00
activation_test.go pkg/systemd: don't require LISTEN_FDNAMES for socket activation 2021-06-24 09:01:39 -06:00
dbus.go Eval symlinks on XDG_RUNTIME_DIR 2022-10-28 14:32:39 -04:00