Giuseppe Scrivano 7f6f2f3f4a userns: use the intermediate mountns for volumes ...

when --uidmap is used, the user won't be able to access
/var/lib/containers/storage/volumes.  Use the intermediate mount
namespace, that is accessible to root in the container, for mounting
the volumes inside the container.

Closes: https://github.com/containers/libpod/issues/2713

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2019-03-21 21:18:13 +01:00

..

common

…

driver

…

events

Add event on container death

2019-03-13 10:18:51 -04:00

image

fix Bug 1688041-podman image save removes existing image

2019-03-20 22:37:58 -04:00

layers

…

lock

…

testdata

…

boltdb_state_internal.go

Validate VolumePath against DB configuration

2019-02-26 09:37:00 -05:00

boltdb_state_linux.go

…

boltdb_state_unsupported.go

…

boltdb_state.go

Change LookupContainer logic to match Docker

2019-03-06 14:26:57 -05:00

common_test.go

…

container_api.go

Merge pull request #2621 from mheon/event_on_death

2019-03-13 12:03:07 -07:00

container_attach_linux.go

…

container_attach_unsupported.go

…

container_commit.go

Add event logging to libpod, even display to podman

2019-03-11 15:08:59 -05:00

container_graph_test.go

…

container_graph.go

…

container_inspect.go

Export ConmonPidFile in 'podman inspect' for containers

2019-03-18 21:03:22 +01:00

container_internal_linux.go

userns: use the intermediate mountns for volumes

2019-03-21 21:18:13 +01:00

container_internal_test.go

libpod/container_internal: Split locale at the first dot, etc.

2019-03-05 22:02:50 -08:00

container_internal_unsupported.go

Make sure buildin volumes have the same ownership and permissions as image

2019-03-15 10:44:44 -04:00

container_internal.go

ps: fix segfault if the store is not initialized

2019-03-19 15:01:54 +01:00

container_linux.go

…

container_log.go

podman logs on created container should exit

2019-03-18 08:58:48 -05:00

container_top_linux.go

…

container_top_unsupported.go

…

container_unsupported.go

…

container.go

healtcheck phase 2

2019-03-12 14:29:18 -05:00

diff.go

…

errors.go

…

events.go

display logs for multiple containers at the same time

2019-03-15 13:41:01 -05:00

healthcheck.go

healtcheck phase 2

2019-03-12 14:29:18 -05:00

in_memory_state.go

…

info.go

Add path for named volumes to podman info

2019-02-26 09:38:02 -05:00

kube.go

…

mounts_linux.go

…

networking_linux.go

Integration test tweaks

2019-03-15 13:41:01 -05:00

networking_unsupported.go

…

oci_linux.go

userns: use the intermediate mountns for volumes

2019-03-21 21:18:13 +01:00

oci_unsupported.go

…

oci.go

Add support for SCTP port forwarding

2019-03-15 10:51:33 -04:00

options.go

Add event logging to libpod, even display to podman

2019-03-11 15:08:59 -05:00

pod_api.go

Add event logging to libpod, even display to podman

2019-03-11 15:08:59 -05:00

pod_internal.go

…

pod_top_linux.go

…

pod_top_unsupported.go

…

pod.go

…

runtime_ctr.go

volume: create new volumes with right ownership

2019-03-21 20:14:41 +01:00

runtime_img_test.go

…

runtime_img.go

Buffer stdin to a file when importing "-"

2019-03-11 13:33:14 -04:00

runtime_pod_infra_linux.go

Fix generation of infra container command

2019-03-10 14:25:13 -04:00

runtime_pod_linux.go

Add event logging to libpod, even display to podman

2019-03-11 15:08:59 -05:00

runtime_pod_unsupported.go

…

runtime_pod.go

…

runtime_renumber.go

…

runtime_volume_linux.go

Add event logging to libpod, even display to podman

2019-03-11 15:08:59 -05:00

runtime_volume_unsupported.go

Add gating tasks

2019-03-13 12:10:35 -05:00

runtime_volume.go

Add event logging to libpod, even display to podman

2019-03-11 15:08:59 -05:00

runtime.go

utils: split generation and writing of storage.conf

2019-03-17 10:45:51 +01:00

state_test.go

…

state.go

Validate VolumePath against DB configuration

2019-02-26 09:37:00 -05:00

stats_config.go

…

stats_unsupported.go

…

stats.go

…

storage.go

…

util_linux.go

…

util_test.go

…

util_unsupported.go

…

util.go

…

version.go

…

volume_internal.go

…

volume.go

Only remove image volumes when removing containers

2019-02-26 12:16:58 -05:00