Giuseppe Scrivano afd0818326 rootless: automatically create a systemd scope ...

when running in rootless mode and using systemd as cgroup manager
create automatically a systemd scope when the user doesn't own the
current cgroup.

This solves a couple of issues:

on cgroup v2 it is necessary that a process before it can moved to a
different cgroup tree must be in a directory owned by the unprivileged
user.  This is not always true, e.g. when creating a session with su
-l.

Closes: https://github.com/containers/libpod/issues/3937

Also, for running systemd in a container it was before necessary to
specify "systemd-run --scope --user podman ...", now this is done
automatically as part of this PR.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2019-09-12 08:35:26 +02:00

..

adapter

Merge pull request #3896 from mheon/volume_lookup

2019-09-09 21:48:30 +02:00

annotations

Add ContainerManager annotation to created containers

2019-09-10 09:37:14 +02:00

apparmor

golangci-lint round #3

2019-07-21 14:22:39 -05:00

cgroups

rootless: automatically create a systemd scope

2019-09-12 08:35:26 +02:00

channelwriter

account for varlink calls that dont use more

2019-07-10 08:50:05 -05:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

Re-add int64 casts for ctime

2019-07-23 15:43:40 -04:00

errorhandling

first pass of corrections for golangci-lint

2019-07-10 15:52:17 -05:00

hooks

Running Podman with a nonexistent hooks dir is nonfatal

2019-08-13 15:05:42 -04:00

inspect

Begin to break up pkg/inspect

2019-06-03 15:54:53 -04:00

kubeutils

Remove dependency on kubernetes

2018-03-27 21:55:33 +00:00

logs

first pass of corrections for golangci-lint

2019-07-10 15:52:17 -05:00

lookup

pkg/lookup: Return ID-only pointers on ErrNo*Entries

2018-12-04 14:46:43 -08:00

namespaces

namespaces: fix Container() call

2019-08-07 13:11:08 -04:00

netns

Revert "rootless: Rearrange setup of rootless containers"

2019-08-06 09:51:38 -05:00

network

podman network create

2019-09-09 09:32:43 -05:00

registrar

Update registrar unit tests to match them of cri-o

2019-04-04 08:53:32 +02:00

registries

Use the logical registry location instead of the physical one in (podman info)

2019-06-14 15:46:17 +02:00

resolvconf

Use host's resolv.conf if no network namespace enabled

2018-11-27 15:28:09 -05:00

rootless

pkg/util: use rootless function to read additional users

2019-09-03 14:38:08 +02:00

spec

Add support for launching containers without CGroups

2019-09-10 10:52:37 -04:00

sysinfo

golangci-lint round #3

2019-07-21 14:22:39 -05:00

systemdgen

generate systemd: support pods and geneartig files

2019-08-21 17:28:30 +02:00

tracing

trivial cleanups from golang

2019-07-03 15:41:33 -05:00

trust

trivial cleanups from golang

2019-07-03 15:41:33 -05:00

util

Fixup util.GetRootlessConfigHomeDir permission requirements

2019-09-09 15:17:42 +02:00

varlinkapi

Add function for looking up volumes by partial name

2019-09-09 12:06:10 -04:00