Giuseppe Scrivano bfa470e4bc network: disallow CNI networks with user namespaces ... it solves a segfault when running as rootless a command like: $ podman run --uidmap 0:0:1 --net foo --rm fedora true panic: runtime error: invalid memory address or nil pointer dereference [signal SIGSEGV: segmentation violation code=0x1 addr=0x30 pc=0x5629bccc407c] goroutine 1 [running]: panic(0x5629bd3d39e0, 0x5629be0ab8e0) /usr/lib/golang/src/runtime/panic.go:1064 +0x545 fp=0xc0004592c0 sp=0xc0004591f8 pc=0x5629bbd35d85 runtime.panicmem(...) /usr/lib/golang/src/runtime/panic.go:212 runtime.sigpanic() /usr/lib/golang/src/runtime/signal_unix.go:742 +0x413 fp=0xc0004592f0 sp=0xc0004592c0 pc=0x5629bbd4cd33 github.com/containers/podman/libpod.(*Runtime).setupRootlessNetNS(0xc0003fe9c0, 0xc0003d74a0, 0x0, 0x0) /builddir/build/BUILD/podman-2.2.1/_build/src/github.com/containers/podman/libpod/networking_linux.go:238 +0xdc fp=0xc000459338 sp=0xc0004592f0 pc=0x5629bccc407c github.com/containers/podman/libpod.(*Container).completeNetworkSetup(0xc0003d74a0, 0x0, 0x0) /builddir/build/BUILD/podman-2.2.1/_build/src/github.com/containers/podman/libpod/container_internal.go:965 +0xb72 fp=0xc0004594d8 sp=0xc000459338 pc=0x5629bcc81732 [.....] Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>		2021-01-13 17:04:51 +01:00
..
annotations	Spelling	2020-12-22 13:34:31 -05:00
api	Remove the ability to use [name:tag] in podman load command	2021-01-12 17:38:32 -05:00
auth	Add X-Registry-Config support	2020-09-29 08:46:44 -07:00
autoupdate	Spelling	2020-12-22 13:34:31 -05:00
bindings	Remove the ability to use [name:tag] in podman load command	2021-01-12 17:38:32 -05:00
cgroups	Spelling	2020-12-22 13:34:31 -05:00
channel	fix closed the remote connection on pull causes service panic	2020-10-03 11:38:38 +08:00
checkpoint	Include named volumes in container migration	2021-01-07 07:51:19 +00:00
copy	Spelling	2020-12-22 13:34:31 -05:00
criu	Add helper function to read out CRIU version	2018-10-23 12:52:03 +02:00
ctime	Re-add int64 casts for ctime	2019-07-23 15:43:40 -04:00
domain	Merge pull request #8957 from srcshelton/feature/issue-8945	2021-01-13 06:28:00 -05:00
env	Ensure DefaultEnvVariables is used in Specgen	2020-08-18 15:17:46 -04:00
errorhandling	remote copy	2020-12-18 12:08:49 +01:00
hooks	Spelling	2020-12-22 13:34:31 -05:00
inspect	Exorcise Driver code from libpod/define	2021-01-12 11:48:53 -05:00
kubeutils	Remove dependency on kubernetes	2018-03-27 21:55:33 +00:00
lookup	Turn on More linters	2020-06-15 07:05:56 -04:00
namespaces	[CI:DOCS] BZ1860126 - Fix userns defaults in run man page	2020-08-07 15:42:13 -04:00
netns	Switch references of /var/run -> /run	2021-01-07 05:37:24 -05:00
parallel	Move pod jobs to parallel execution	2020-10-07 10:00:11 -04:00
ps	Add Networks format placeholder to podman ps and pod ps	2021-01-09 19:15:43 +01:00
registrar	Switch all references to github.com/containers/libpod -> podman	2020-07-28 08:23:45 -04:00
registries	pkg/registries: add a retiring note	2020-09-30 16:30:41 +02:00
resolvconf	Switch all references to github.com/containers/libpod -> podman	2020-07-28 08:23:45 -04:00
rootless	rootless: automatically split userns ranges	2021-01-07 09:42:27 +01:00
rootlessport	rootlessport: use two different channels	2020-04-29 12:35:23 +02:00
seccomp	Spelling	2020-12-22 13:34:31 -05:00
selinux	Fix SELinux functions names to not be repetitive	2020-04-23 15:57:34 -04:00
signal	Fix build for mips architecture follow-up	2021-01-07 15:04:22 +01:00
specgen	network: disallow CNI networks with user namespaces	2021-01-13 17:04:51 +01:00
systemd	More /var/run -> /run	2021-01-12 17:38:32 -05:00
terminal	Refine public key usage when remote	2020-12-10 15:32:37 -07:00
timetype	make lint: enable gocritic	2020-01-13 14:27:02 +01:00
tracing	make lint: include pkg/tracing	2020-01-14 09:54:48 +01:00
trust	image sign using per user registries.d	2020-12-07 09:58:38 -05:00
util	Spelling	2020-12-22 13:34:31 -05:00