Make qemu security model none

On Mac machines security model none works, while "mapped-xattr"
causes symlinks to not work.

Update docs/source/markdown/podman-machine-init.1.md

[NO NEW TESTS NEEDED]

Related: https://github.com/containers/podman/discussions/16102

Co-authored-by: Tom Sweeney <tsweeney@redhat.com>
Signed-off-by: Sorin Sbarnea <sorin.sbarnea@gmail.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
Sorin SbarneaandTom Sweeney authored and Daniel J Walsh committed 2022-12-14 15:35:30 -05:00
1 parent 2a48296b0b
commit 866426a93d
2 files changed
+7 -3

No files matched your search

@@ -97,8 +97,12 @@ options are:
The 9p security model [determines] https://wiki.qemu.org/Documentation/9psetup#Starting_the_Guest_directly
if and how the 9p filesystem translates some filesystem operations before
actual storage on the host. The
default value of *mapped-xattr* specifies that 9p store symlinks and some file
actual storage on the host.
In order to allow symlinks to work, on MacOS the default security model is
*none*.
The value of *mapped-xattr* specifies that 9p store symlinks and some file
attributes as extended attributes on the host. This is suitable when the host
and the guest do not need to interoperate on the shared filesystem, but has
caveats for actual shared access; notably, symlinks on the host are not usable
+1 -1
View File
@@ -305,7 +305,7 @@ func (v *MachineVM) Init(opts machine.InitOptions) (bool, error) {
source := paths[0]
target := source
readonly := false
securityModel := "mapped-xattr"
securityModel := "none"
if len(paths) > 1 {
target = paths[1]
}