Giuseppe Scrivano 7ba38b375f createconfig: always cleanup a rootless container ...

the rootless container storage is always mounted in a different mount
namespace, owned by the unprivileged user.  Even if it is mounted, a
process running in another namespace cannot reuse the already mounted
storage.

Make sure the storage is always cleaned up once the container
terminates.

This has worked with vfs since there is no real mounted storage.

Closes: https://github.com/containers/libpod/issues/2112

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2019-01-10 13:02:58 +01:00

..

config_linux.go

Fix handling of symbolic links

2018-12-28 13:10:15 -05:00

config_unsupported.go

spec: Make addPrivilegedDevices and createBlockIO per-platform

2018-07-06 00:48:40 +00:00

createconfig.go

createconfig: always cleanup a rootless container

2019-01-10 13:02:58 +01:00

parse.go

Invalid index for array

2018-12-21 09:25:25 -05:00

ports.go

Spell check strings and comments

2018-05-25 08:45:15 +00:00

spec_test.go

Swap default mount propagation from private to rprivate

2018-09-13 21:35:44 +00:00

spec.go

apparmor: apply default profile at container initialization

2019-01-09 22:18:11 +01:00