Matthew Heon 46183cf873 Ignore containers.conf sysctls when sharing namespaces ...

The existing code prevents containers.conf default sysctls from
being added if the container uses a host namespace. This patch
expands that to not just host namespaces, but also *shared*
namespaces - so we never modify another container's (or a pod's)
namespaces without being explicitly directed to do so by the
user.

Signed-off-by: Matthew Heon <mheon@redhat.com>

2020-12-10 11:43:59 -05:00

..

annotations

Add ContainerManager annotation to created containers

2019-09-10 09:37:14 +02:00

api

Merge pull request #8653 from rhatdan/buildah

2020-12-09 14:58:28 -05:00

auth

Add X-Registry-Config support

2020-09-29 08:46:44 -07:00

autoupdate

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

bindings

Honor the --layers flag

2020-12-09 08:31:36 -05:00

cgroups

pkg/cgroups/createCgroupv2Path: nits

2020-10-05 15:57:57 -07:00

channel

fix closed the remote connection on pull causes service panic

2020-10-03 11:38:38 +08:00

checkpoint

Lowercase some errors

2020-10-05 15:56:44 -07:00

copy

pkg/copy: introduce a Copier

2020-12-09 14:05:17 +01:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

Re-add int64 casts for ctime

2019-07-23 15:43:40 -04:00

domain

Merge pull request #8663 from vrothberg/run-950

2020-12-09 10:39:48 -05:00

env

Ensure DefaultEnvVariables is used in Specgen

2020-08-18 15:17:46 -04:00

errorhandling

remote run: fix error checks

2020-09-11 12:41:15 +02:00

hooks

pkg/hooks: support all hooks

2020-09-22 14:44:09 +02:00

inspect

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

kubeutils

Remove dependency on kubernetes

2018-03-27 21:55:33 +00:00

lookup

Turn on More linters

2020-06-15 07:05:56 -04:00

namespaces

[CI:DOCS] BZ1860126 - Fix userns defaults in run man page

2020-08-07 15:42:13 -04:00

netns

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

parallel

Move pod jobs to parallel execution

2020-10-07 10:00:11 -04:00

ps

Handle ps container created field as a time.Time

2020-11-20 10:50:30 -05:00

registrar

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

registries

pkg/registries: add a retiring note

2020-09-30 16:30:41 +02:00

resolvconf

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

rootless

Remove excessive error wrapping

2020-10-05 15:30:37 -07:00

rootlessport

rootlessport: use two different channels

2020-04-29 12:35:23 +02:00

seccomp

apiv2 container create using specgen

2020-02-19 15:20:15 -06:00

selinux

Fix SELinux functions names to not be repetitive

2020-04-23 15:57:34 -04:00

signal

Turn on More linters

2020-06-15 07:05:56 -04:00

specgen

Ignore containers.conf sysctls when sharing namespaces

2020-12-10 11:43:59 -05:00

systemd

Drop default log-level from error to warn

2020-12-03 06:28:09 -05:00

terminal

Support hashed hostnames in the known_hosts file

2020-10-27 12:19:44 +01:00

timetype

make lint: enable gocritic

2020-01-13 14:27:02 +01:00

tracing

make lint: include pkg/tracing

2020-01-14 09:54:48 +01:00

trust

image sign using per user registries.d

2020-12-07 09:58:38 -05:00

util

Support Unix timestamps for podman logs --since

2020-12-04 15:14:31 +08:00