Giuseppe Scrivano bfa470e4bc network: disallow CNI networks with user namespaces ...

it solves a segfault when running as rootless a command like:

$ podman run --uidmap 0:0:1 --net foo --rm fedora true
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x30 pc=0x5629bccc407c]

goroutine 1 [running]:
panic(0x5629bd3d39e0, 0x5629be0ab8e0)
	/usr/lib/golang/src/runtime/panic.go:1064 +0x545 fp=0xc0004592c0 sp=0xc0004591f8 pc=0x5629bbd35d85
runtime.panicmem(...)
	/usr/lib/golang/src/runtime/panic.go:212
runtime.sigpanic()
	/usr/lib/golang/src/runtime/signal_unix.go:742 +0x413 fp=0xc0004592f0 sp=0xc0004592c0 pc=0x5629bbd4cd33
github.com/containers/podman/libpod.(*Runtime).setupRootlessNetNS(0xc0003fe9c0, 0xc0003d74a0, 0x0, 0x0)
	/builddir/build/BUILD/podman-2.2.1/_build/src/github.com/containers/podman/libpod/networking_linux.go:238 +0xdc fp=0xc000459338 sp=0xc0004592f0 pc=0x5629bccc407c
github.com/containers/podman/libpod.(*Container).completeNetworkSetup(0xc0003d74a0, 0x0, 0x0)
	/builddir/build/BUILD/podman-2.2.1/_build/src/github.com/containers/podman/libpod/container_internal.go:965 +0xb72 fp=0xc0004594d8 sp=0xc000459338 pc=0x5629bcc81732

[.....]

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2021-01-13 17:04:51 +01:00

..

annotations

Spelling

2020-12-22 13:34:31 -05:00

api

Remove the ability to use [name:tag] in podman load command

2021-01-12 17:38:32 -05:00

auth

Add X-Registry-Config support

2020-09-29 08:46:44 -07:00

autoupdate

Spelling

2020-12-22 13:34:31 -05:00

bindings

Remove the ability to use [name:tag] in podman load command

2021-01-12 17:38:32 -05:00

cgroups

Spelling

2020-12-22 13:34:31 -05:00

channel

fix closed the remote connection on pull causes service panic

2020-10-03 11:38:38 +08:00

checkpoint

Include named volumes in container migration

2021-01-07 07:51:19 +00:00

copy

Spelling

2020-12-22 13:34:31 -05:00

criu

Add helper function to read out CRIU version

2018-10-23 12:52:03 +02:00

ctime

Re-add int64 casts for ctime

2019-07-23 15:43:40 -04:00

domain

Merge pull request #8957 from srcshelton/feature/issue-8945

2021-01-13 06:28:00 -05:00

env

Ensure DefaultEnvVariables is used in Specgen

2020-08-18 15:17:46 -04:00

errorhandling

remote copy

2020-12-18 12:08:49 +01:00

hooks

Spelling

2020-12-22 13:34:31 -05:00

inspect

Exorcise Driver code from libpod/define

2021-01-12 11:48:53 -05:00

kubeutils

Remove dependency on kubernetes

2018-03-27 21:55:33 +00:00

lookup

Turn on More linters

2020-06-15 07:05:56 -04:00

namespaces

[CI:DOCS] BZ1860126 - Fix userns defaults in run man page

2020-08-07 15:42:13 -04:00

netns

Switch references of /var/run -> /run

2021-01-07 05:37:24 -05:00

parallel

Move pod jobs to parallel execution

2020-10-07 10:00:11 -04:00

ps

Add Networks format placeholder to podman ps and pod ps

2021-01-09 19:15:43 +01:00

registrar

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

registries

pkg/registries: add a retiring note

2020-09-30 16:30:41 +02:00

resolvconf

Switch all references to github.com/containers/libpod -> podman

2020-07-28 08:23:45 -04:00

rootless

rootless: automatically split userns ranges

2021-01-07 09:42:27 +01:00

rootlessport

rootlessport: use two different channels

2020-04-29 12:35:23 +02:00

seccomp

Spelling

2020-12-22 13:34:31 -05:00

selinux

Fix SELinux functions names to not be repetitive

2020-04-23 15:57:34 -04:00

signal

Fix build for mips architecture follow-up

2021-01-07 15:04:22 +01:00

specgen

network: disallow CNI networks with user namespaces

2021-01-13 17:04:51 +01:00

systemd

More /var/run -> /run

2021-01-12 17:38:32 -05:00

terminal

Refine public key usage when remote

2020-12-10 15:32:37 -07:00

timetype

make lint: enable gocritic

2020-01-13 14:27:02 +01:00

tracing

make lint: include pkg/tracing

2020-01-14 09:54:48 +01:00

trust

image sign using per user registries.d

2020-12-07 09:58:38 -05:00

util

Spelling

2020-12-22 13:34:31 -05:00