erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-09-17 13:17:55 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
spiegel_podman/cmd/podman
History
Giuseppe Scrivano 720eb85ba5 rootless: fix exec 
We cannot re-exec into a new user namespace to gain privileges and
access an existing as the new namespace is not the owner of the
existing container.

"unshare" is used to join the user namespace of the target container.

The current implementation assumes that the main process of the
container didn't create a new user namespace.

Since in the setup phase we are not running with euid=0, we must skip
the setup for containers/storage.

Closes: https://github.com/containers/libpod/issues/1329

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

Closes: #1331
Approved by: rhatdan
2018-08-26 07:22:42 +00:00
..
docker Rename all references to kpod to podman 2017-12-18 16:46:05 +00:00
formats switch projectatomic to containers 2018-08-16 17:12:36 +00:00
libpodruntime Change pause container to infra container 2018-08-23 18:16:28 +00:00
shared Fixing network ns segfault 2018-08-23 18:16:28 +00:00
varlink Change pause container to infra container 2018-08-23 18:16:28 +00:00
attach.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
build.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
cleanup.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
commit.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
common.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
common_test.go Rename all references to kpod to podman 2017-12-18 16:46:05 +00:00
container.go Cleanup descriptions and help information 2018-07-27 02:17:29 +00:00
create.go Do not try to enable AppArmor in rootless mode 2018-08-24 17:08:11 +00:00
create_cli.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
create_cli_test.go Implement and test the following flags for podman run and create 2018-01-15 19:27:10 +00:00
diff.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
exec.go rootless: fix exec 2018-08-26 07:22:42 +00:00
export.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
history.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
image.go Cleanup descriptions and help information 2018-07-27 02:17:29 +00:00
images.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
import.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
info.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
inspect.go Change batchcontainer to shared 2018-08-16 20:31:50 +00:00
kill.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
load.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
login.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
logout.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
logs.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
main.go rootless: fix exec 2018-08-26 07:22:42 +00:00
mount.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
parse.go Fix handling of devices 2018-08-20 13:42:07 +00:00
pause.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod.go Add podman pod top 2018-08-23 15:01:17 +00:00
pod_create.go Fixing network ns segfault 2018-08-23 18:16:28 +00:00
pod_inspect.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod_kill.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod_pause.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod_ps.go Fixed formatting and lowered verbosity of pod ps 2018-08-24 17:37:33 +00:00
pod_restart.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod_rm.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod_start.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod_stats.go Enable pod stats with short ID and name 2018-08-21 14:34:08 +00:00
pod_stop.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
pod_top.go Add podman pod top 2018-08-23 15:01:17 +00:00
pod_unpause.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
port.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
ps.go Change pause container to infra container 2018-08-23 18:16:28 +00:00
pull.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
push.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
README.md Update Podman-specific readme 2018-05-11 15:32:27 +00:00
refresh.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
restart.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
rm.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
rmi.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
run.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
run_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
save.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
search.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
sigproxy.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
start.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
stats.go Changed GetContainerStats to return ErrCtrStateInvalid 2018-08-23 15:58:08 +00:00
stop.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
tag.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
top.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
umount.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
unpause.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
utils.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
varlink.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
varlink_dummy.go make varlink optional for podman 2018-06-24 10:54:40 +00:00
version.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
wait.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00

README.md

podman - Simple debugging tool for pods and images

podman is a daemonless container runtime for managing containers, pods, and container images. It is intended as a counterpart to CRI-O, to provide low-level debugging not available through the CRI interface used by Kubernetes. It can also act as a container runtime independent of CRI-O, creating and managing its own set of containers.

Use cases

  1. Create containers
  2. Start, stop, signal, attach to, and inspect existing containers
  3. Run new commands in existing containers
  4. Push and pull images
  5. List and inspect existing images
  6. Create new images by committing changes within a container
  7. Create pods
  8. Start, stop, signal, and inspect existing pods
  9. Populate pods with containers