mirror of
https://codeberg.org/guix/guix.git
synced 2026-01-25 12:05:19 -06:00
a57ed987ff
This makes it impossible to unmount or remount things from within
‘call-with-container’.
* gnu/build/linux-container.scm (initialize-user-namespace):
Add #:host-uid and #:host-gid. and honor them.
(run-container): Add #:lock-mounts?. Honor it by calling ‘unshare’
followed by ‘initialize-user-namespace’.
(call-with-container): Add #:lock-mounts? and pass it down.
(container-excursion): Get the user namespace owning the PID namespace
and join it, then join the remaining namespaces.
* tests/containers.scm ("call-with-container, mnt namespace, locked mounts"):
New test.
("container-excursion"): Pass #:lock-mounts? #f.
Change-Id: I13be982aef99e68a653d472f0e595c81cfcfa392
|
||
|---|---|---|
| .. | ||
| accounts.scm | ||
| activation.scm | ||
| bootloader.scm | ||
| chromium-extension.scm | ||
| cross-toolchain.scm | ||
| dbus-service.scm | ||
| file-systems.scm | ||
| hurd-boot.scm | ||
| icecat-extension.scm | ||
| image.scm | ||
| install.scm | ||
| jami-service.scm | ||
| linux-boot.scm | ||
| linux-container.scm | ||
| linux-initrd.scm | ||
| linux-modules.scm | ||
| locale.scm | ||
| marionette.scm | ||
| secret-service.scm | ||
| shepherd.scm | ||
| svg.scm | ||