Giuseppe Scrivano 7ba38b375f createconfig: always cleanup a rootless container ...

the rootless container storage is always mounted in a different mount
namespace, owned by the unprivileged user.  Even if it is mounted, a
process running in another namespace cannot reuse the already mounted
storage.

Make sure the storage is always cleaned up once the container
terminates.

This has worked with vfs since there is no real mounted storage.

Closes: https://github.com/containers/libpod/issues/2112

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2019-01-10 13:02:58 +01:00

..

annotations

Spell check strings and comments

2018-05-25 08:45:15 +00:00

apparmor

apparmor: apply default profile at container initialization

2019-01-09 22:18:11 +01:00

chrootuser

Generate a passwd file for users not in container

2018-10-12 07:08:13 -04:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

ctime: Drop 32-/64-bit distinction on Linux

2018-07-07 20:35:00 +00:00

firewall

Replace existing iptables handler with firewall code

2018-09-10 18:53:27 +00:00

hooks

pkg/hooks/exec: Include failed command in hook errors

2019-01-08 21:06:17 -08:00

inspect

Switch all referencs to image.ContainerConfig to image.Config

2018-12-21 15:59:34 -05:00

kubeutils

Remove dependency on kubernetes

2018-03-27 21:55:33 +00:00

logs

Add CRI logs parsing to podman logs

2018-09-05 13:48:20 +00:00

lookup

pkg/lookup: Return ID-only pointers on ErrNo*Entries

2018-12-04 14:46:43 -08:00

namespaces

Change all 'can not' to 'cannot' for proper usage

2018-12-21 10:27:54 -05:00

netns

Fix godoc comment in pkg/netns

2018-07-27 02:48:16 +00:00

registrar

Initial checkin from CRI-O repo

2017-11-01 11:24:59 -04:00

registries

Factor out the registries.conf location code in pkg/registries

2018-12-06 23:34:59 +01:00

resolvconf

Use host's resolv.conf if no network namespace enabled

2018-11-27 15:28:09 -05:00

rootless

rootless: add function to join user and mount namespace

2018-12-21 09:46:05 +01:00

secrets

rootless: create empty mounts.conf if it doesn't exist

2018-11-19 12:58:11 +01:00

spec

createconfig: always cleanup a rootless container

2019-01-10 13:02:58 +01:00

sysinfo

apparmor: apply default profile at container initialization

2019-01-09 22:18:11 +01:00

trust

Support podman image trust command

2018-12-19 13:36:11 -05:00

util

Merge pull request #2076 from rhatdan/storage.conf

2019-01-08 05:55:40 -08:00

varlinkapi

libpod/image: Use ParseNormalizedNamed in RepoDigests

2019-01-09 22:29:18 +00:00