spiegel_podman/libpod
Matthew Heon 5bdd97f77f Set base mount options for bind mounts from base system
If I mount, say, /usr/bin into my container - I expect to be able
to run the executables in that mount. Unconditionally applying
noexec would be a bad idea.

Before my patches to change mount options and allow exec/dev/suid
being set explicitly, we inferred the mount options from where on
the base system the mount originated, and the options it had
there. Implement the same functionality for the new option
handling.

There's a lot of performance left on the table here, but I don't
know that this is ever going to take enough time to make it worth
optimizing.

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-08-28 14:28:18 -04:00
..
common Set blob cache directory based on GraphDriver 2019-03-29 08:27:33 -04:00
define Add conmon probe to runtime construction 2019-08-08 20:24:19 -04:00
driver removMergeDir from inspect result if not mounted 2019-08-13 15:13:20 -04:00
events performance fix for podman events with large journalds 2019-08-14 09:30:12 -05:00
image image: remove unused Decompose method 2019-08-28 08:59:33 -05:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
lock trivial cleanups from golang 2019-07-03 15:41:33 -05:00
logs golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
boltdb_state.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
boltdb_state_internal.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
boltdb_state_linux.go podman-remote inspect 2019-01-18 15:43:11 -06:00
boltdb_state_unsupported.go podman-remote inspect 2019-01-18 15:43:11 -06:00
common_test.go code cleanup 2019-07-08 09:18:11 -05:00
container.go Add comment to describe postConfigureNetNS 2019-07-30 23:28:52 +00:00
container.log.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_api.go exec: run with user specified on container start 2019-08-20 11:44:27 -04:00
container_commit.go Fix commit --changes env=X=Y 2019-07-26 16:04:17 -07:00
container_graph.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
container_graph_test.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
container_inspect.go Print Pod ID in podman inspect output 2019-08-01 11:34:36 -04:00
container_internal.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
container_internal_linux.go cgroup: fix regression when running systemd 2019-08-06 19:46:34 +02:00
container_internal_test.go Potentially breaking: Make hooks sort order locale-independent 2019-04-09 21:08:44 +02:00
container_internal_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_log_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_log_unsupported.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_top_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_top_unsupported.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
container_unsupported.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
diff.go Add function to get a filtered tarstream diff 2019-07-11 14:43:34 +02:00
events.go get last container event 2019-07-07 08:54:20 -05:00
healthcheck.go Implement conmon exec 2019-07-22 15:57:23 -04:00
healthcheck_linux.go golangci-lint pass number 2 2019-07-11 09:13:06 -05:00
healthcheck_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
in_memory_state.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
info.go add eventlogger to info 2019-08-02 20:05:27 -05:00
kube.go Add capability functionality to play kube 2019-08-01 15:47:45 -04:00
mounts_linux.go set root propagation based on volume properties 2018-11-26 13:55:02 +01:00
networking_linux.go networking: use firewall plugin 2019-08-19 16:16:06 +02:00
networking_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
oci.go Merge pull request #3760 from rhatdan/auth 2019-08-19 21:16:06 +02:00
oci_attach_linux.go golangci-lint cleanup 2019-07-23 10:13:04 -05:00
oci_attach_linux_cgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_linux_nocgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_unsupported.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_internal_linux.go Merge pull request #3760 from rhatdan/auth 2019-08-19 21:16:06 +02:00
oci_linux.go Use GetRuntimeDir to setup auth.json for login 2019-08-12 14:11:53 -04:00
oci_unsupported.go Implement conmon exec 2019-07-22 15:57:23 -04:00
options.go Set base mount options for bind mounts from base system 2019-08-28 14:28:18 -04:00
pod.go Allow customizing pod hostname 2019-08-18 03:48:40 +00:00
pod_api.go generate systemd: support pods and geneartig files 2019-08-21 17:28:30 +02:00
pod_internal.go remove libpod from main 2019-06-25 13:51:24 -05:00
pod_top_linux.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
pod_top_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime.go Add an integration test for systemd in a container 2019-08-28 09:28:49 -04:00
runtime_cstorage.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_ctr.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_img.go make rmi messages more compatible with docker 2019-08-08 20:05:55 -05:00
runtime_img_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_migrate.go code cleanup 2019-07-08 09:18:11 -05:00
runtime_migrate_unsupported.go system: migrate stops the pause process 2019-05-17 20:48:25 +02:00
runtime_pod.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_pod_infra_linux.go Merge pull request #3836 from chenzhiwei/hostname 2019-08-19 13:33:15 +02:00
runtime_pod_linux.go Fix error message on podman stats on cgroups v1 rootless environments 2019-08-19 07:41:50 -04:00
runtime_pod_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
runtime_renumber.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_volume.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_volume_linux.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
runtime_volume_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
state.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
state_test.go libpod removal from main (phase 2) 2019-06-27 07:56:24 -05:00
stats.go Build fix for 32-bit systems. 2019-07-30 12:25:36 -04:00
stats_config.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
stats_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
storage.go remove libpod from main 2019-06-25 13:51:24 -05:00
util.go code cleanup 2019-07-08 09:18:11 -05:00
util_linux.go pkg/cgroups: use DBUS session when rootless 2019-08-14 15:46:07 +02:00
util_test.go Stage3 Image Library 2018-03-14 20:21:31 +00:00
util_unsupported.go remove libpod from main 2019-06-25 13:51:24 -05:00
volume.go Re-add locks to volumes. 2019-08-28 11:35:00 -04:00
volume_inspect.go Fix typos 2019-08-02 15:30:31 -04:00
volume_internal.go Remove locks from volumes 2019-02-21 10:51:42 -05:00