Daniel J Walsh df99522c67 Fixes to handle /dev/shm correctly. ...

We had two problems with /dev/shm, first, you mount the
container read/only then /dev/shm was mounted read/only.
This is a bug a tmpfs directory should be read/write within
a read-only container.

The second problem is we were ignoring users mounted /dev/shm
from the host.

If user specified

podman run -d -v /dev/shm:/dev/shm ...

We were dropping this mount and still using the internal mount.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>

2018-12-24 09:03:53 -05:00

..

annotations

Spell check strings and comments

2018-05-25 08:45:15 +00:00

apparmor

pkg/apparmor: use a pipe instead of a tmp file

2018-08-14 14:25:14 +00:00

chrootuser

Generate a passwd file for users not in container

2018-10-12 07:08:13 -04:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

ctime: Drop 32-/64-bit distinction on Linux

2018-07-07 20:35:00 +00:00

firewall

Replace existing iptables handler with firewall code

2018-09-10 18:53:27 +00:00

hooks

Change references to cri-o to point at new repository

2018-09-07 17:47:45 +00:00

inspect

Switch all referencs to image.ContainerConfig to image.Config

2018-12-21 15:59:34 -05:00

kubeutils

Remove dependency on kubernetes

2018-03-27 21:55:33 +00:00

logs

Add CRI logs parsing to podman logs

2018-09-05 13:48:20 +00:00

lookup

pkg/lookup: Return ID-only pointers on ErrNo*Entries

2018-12-04 14:46:43 -08:00

namespaces

Change all 'can not' to 'cannot' for proper usage

2018-12-21 10:27:54 -05:00

netns

Fix godoc comment in pkg/netns

2018-07-27 02:48:16 +00:00

registrar

Initial checkin from CRI-O repo

2017-11-01 11:24:59 -04:00

registries

Factor out the registries.conf location code in pkg/registries

2018-12-06 23:34:59 +01:00

resolvconf

Use host's resolv.conf if no network namespace enabled

2018-11-27 15:28:09 -05:00

rootless

rootless: add function to join user and mount namespace

2018-12-21 09:46:05 +01:00

secrets

rootless: create empty mounts.conf if it doesn't exist

2018-11-19 12:58:11 +01:00

spec

Fixes to handle /dev/shm correctly.

2018-12-24 09:03:53 -05:00

trust

Support podman image trust command

2018-12-19 13:36:11 -05:00

util

Refactor: use idtools.ParseIDMap instead of bundling own version

2018-12-23 12:07:54 +01:00

varlinkapi

Switch all referencs to image.ContainerConfig to image.Config

2018-12-21 15:59:34 -05:00