Giuseppe Scrivano afa4ec0db0 specgen: keep capabilities with --userns=keep-id ...

if --userns=keep-id is specified and not --user is specified, take the
unprivileged capabilities code path so that ambient capabilities are
honored in the container.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2020-11-02 15:46:56 +01:00

..

config_linux_cgo.go

Remove excessive error wrapping

2020-10-05 15:30:37 -07:00

config_linux_nocgo.go

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

config_linux.go

specgen: add support for ambient capabilities

2020-11-02 14:36:39 +01:00

container_create.go

new "image" mount type

2020-10-29 15:06:22 +01:00

container.go

Merge pull request #7798 from QiWang19/run-manifest

2020-09-30 18:38:07 +00:00

namespaces.go

Merge pull request #8177 from rhatdan/wrap

2020-10-30 19:52:17 +01:00

oci.go

refactor api compatibility container creation to specgen

2020-10-20 12:06:59 -05:00

pod_create.go

Add support for slirp network for pods

2020-09-25 21:34:23 -04:00

ports.go

Fix host to container port mapping for simple ranges

2020-10-19 11:19:12 +02:00

security.go

specgen: keep capabilities with --userns=keep-id

2020-11-02 15:46:56 +01:00

storage.go

Fix incorrect parsing of create/run --volumes-from

2020-09-20 22:49:09 +02:00

validate.go

Merge pull request #8197 from giuseppe/check-cgroupv2-swap-enabled

2020-10-31 11:40:07 +01:00