Ludovic Courtès a57ed987ff linux-container: Lock mounts by default. ... This makes it impossible to unmount or remount things from within ‘call-with-container’. * gnu/build/linux-container.scm (initialize-user-namespace): Add #:host-uid and #:host-gid. and honor them. (run-container): Add #:lock-mounts?. Honor it by calling ‘unshare’ followed by ‘initialize-user-namespace’. (call-with-container): Add #:lock-mounts? and pass it down. (container-excursion): Get the user namespace owning the PID namespace and join it, then join the remaining namespaces. * tests/containers.scm ("call-with-container, mnt namespace, locked mounts"): New test. ("container-excursion"): Pass #:lock-mounts? #f. Change-Id: I13be982aef99e68a653d472f0e595c81cfcfa392		2025-05-05 14:34:00 +02:00
..
bootloader
build	linux-container: Lock mounts by default.	2025-05-05 14:34:00 +02:00
home
installer
machine	machine: hetzner: Allow attaching existing public IPs.	2025-04-21 23:55:50 +02:00
packages	gnu: trealla: Update to 2.70.3.	2025-05-05 01:47:48 -05:00
services	services: guix: Fix case when /etc/guix/acl is a dangling symlink.	2025-05-05 14:33:59 +02:00
system	linux-container: Support having a read-only root file system.	2025-05-05 14:33:59 +02:00
tests	services: postgresql-role: Add support for password files.	2025-05-02 15:32:25 +09:00
artwork.scm
bootloader.scm
ci.scm
compression.scm
home.scm
image.scm
installer.scm
local.mk	gnu: eudev: Fix optical discs detection/auto-mounting.	2025-05-04 08:53:08 +09:00
machine.scm
packages.scm
services.scm
system.scm
tests.scm