Giuseppe Scrivano 80bad464f9 secrets: fix fips-mode with user namespaces ...

When using a user namespace, we create the mount point under
`mountPrefix` so that the uid != 0 can access that directory.

Change the addFIPSModeSecret code to honor that, and also ensure we
are creating the directories with the right ownership.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2019-02-27 22:40:38 +01:00

..

adapter

Fix build for non-Varlink-tagged Podman

2019-02-27 10:27:08 -05:00

annotations

Spell check strings and comments

2018-05-25 08:45:15 +00:00

apparmor

apparmor: don't load default profile in rootless mode

2019-01-29 10:38:52 -05:00

chrootuser

Generate a passwd file for users not in container

2018-10-12 07:08:13 -04:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

ctime: Drop 32-/64-bit distinction on Linux

2018-07-07 20:35:00 +00:00

firewall

Replace existing iptables handler with firewall code

2018-09-10 18:53:27 +00:00

hooks

pkg/hooks/exec: Include failed command in hook errors

2019-01-08 21:06:17 -08:00

inspect

Switch all referencs to image.ContainerConfig to image.Config

2018-12-21 15:59:34 -05:00

kubeutils

Remove dependency on kubernetes

2018-03-27 21:55:33 +00:00

logs

Add CRI logs parsing to podman logs

2018-09-05 13:48:20 +00:00

lookup

pkg/lookup: Return ID-only pointers on ErrNo*Entries

2018-12-04 14:46:43 -08:00

namespaces

Change all 'can not' to 'cannot' for proper usage

2018-12-21 10:27:54 -05:00

netns

Fix godoc comment in pkg/netns

2018-07-27 02:48:16 +00:00

registrar

Initial checkin from CRI-O repo

2017-11-01 11:24:59 -04:00

registries

Add registry name to fields returned by varlink image search

2019-02-15 15:30:09 -05:00

resolvconf

Use host's resolv.conf if no network namespace enabled

2018-11-27 15:28:09 -05:00

rootless

rootless: force same cwd when re-execing

2019-02-22 23:55:21 +01:00

secrets

secrets: fix fips-mode with user namespaces

2019-02-27 22:40:38 +01:00

spec

volume: do not create a volume if there is a bind

2019-02-26 18:42:04 +01:00

sysinfo

apparmor: apply default profile at container initialization

2019-01-09 22:18:11 +01:00

tracing

OpenTracing support added to start, stop, run, create, pull, and ps

2019-02-18 09:57:08 -05:00

trust

Fix up image sign in PR 2108

2019-01-15 12:25:10 -05:00

util

Centralize setting default volume path

2019-02-26 15:44:46 -05:00

varlinkapi

Merge pull request #2422 from baude/remotepodcreate

2019-02-25 21:57:42 +01:00