spiegel_podman/pkg/specgen/generate
Giuseppe Scrivano 1d76a166c6 oci: bind mount /sys with --userns=(auto|pod:)
when using --userns=auto or --userns=pod, we should bind mount /sys
from the host instead of creating a new /sys in the container,
otherwise we rely on the fallback provided by crun, which might not be
available in other runtimes.

Also, in the last version of crun the fallback is stricter than it
used to be before and it uses a recursive bind mount through the new
mount API.  That can be missing on old kernel.

Closes: https://github.com/containers/crun/issues/1131

[NO NEW TESTS NEEDED] to trigger the failure, we need a specific
combination of kernel, libc and OCI runtime.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-02-07 14:40:56 -05:00
..
kube kube-play: add support for HostPID in podSpec 2023-01-20 17:32:59 +05:30
config_linux.go specgen: support CDI devices from containers.conf 2022-11-25 11:44:38 +01:00
config_linux_cgo.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
config_linux_nocgo.go go fmt: use go 1.18 conditional-build syntax 2022-03-18 09:11:53 +01:00
config_linux_test.go Add filepath glob support to --security-opt unmask 2021-05-04 14:40:43 -04:00
container.go Remove ReservedAnnotations from kube generate specification 2023-01-18 08:46:24 -05:00
container_create.go add support for subpath in play kube for named volumes 2022-12-12 09:54:00 -05:00
namespaces.go [CI:DOCS] Fix spelling and typos 2022-11-19 16:26:00 +01:00
namespaces_freebsd.go Fix stutters 2022-09-10 07:52:00 -04:00
namespaces_linux.go Stop recording annotations set to false 2022-12-19 16:07:33 -05:00
namespaces_unsupported.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
oci.go specgen/generate: Move SpecGenToOCI, WeightDevices to oci_linux.go and add stubs. 2022-08-30 11:23:58 +01:00
oci_freebsd.go Stop recording annotations set to false 2022-12-19 16:07:33 -05:00
oci_linux.go oci: bind mount /sys with --userns=(auto|pod:) 2023-02-07 14:40:56 -05:00
oci_unsupported.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
pause_image.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
pod_create.go remove pod if creation has failed 2022-11-15 13:36:57 +01:00
pod_create_test.go Allow namespace path network option for pods. 2022-11-04 11:26:06 +01:00
ports.go Fixes port collision issue on use of --publish-all 2023-01-31 15:18:25 +00:00
ports_bench_test.go fix a number of errcheck issues 2022-03-22 13:15:28 +01:00
ports_test.go bump golangci-lint to v1.50.1 2022-12-15 13:39:56 +01:00
rlimit_int64.go pkg/specgen: Add stubs for non-linux builds 2022-08-15 10:45:23 +01:00
rlimit_uint64.go pkg/specgen: Add stubs for non-linux builds 2022-08-15 10:45:23 +01:00
security_freebsd.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
security_linux.go specgen/generate: Move security.go to security_linux.go and add stubs 2022-08-29 13:06:15 +01:00
security_unsupported.go specgen/generate: Add support for FreeBSD 2022-08-30 11:24:57 +01:00
storage.go Add containers.conf read-only flag support 2022-12-22 11:57:28 -05:00
validate.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00