mirror of
https://https.git.savannah.gnu.org/git/guix.git/
synced 2025-07-09 23:50:47 +02:00
This makes it impossible to unmount or remount things from within ‘call-with-container’. * gnu/build/linux-container.scm (initialize-user-namespace): Add #:host-uid and #:host-gid. and honor them. (run-container): Add #:lock-mounts?. Honor it by calling ‘unshare’ followed by ‘initialize-user-namespace’. (call-with-container): Add #:lock-mounts? and pass it down. (container-excursion): Get the user namespace owning the PID namespace and join it, then join the remaining namespaces. * tests/containers.scm ("call-with-container, mnt namespace, locked mounts"): New test. ("container-excursion"): Pass #:lock-mounts? #f. Change-Id: I13be982aef99e68a653d472f0e595c81cfcfa392 |
||
---|---|---|
.. | ||
accounts.scm | ||
activation.scm | ||
bootloader.scm | ||
chromium-extension.scm | ||
cross-toolchain.scm | ||
dbus-service.scm | ||
file-systems.scm | ||
hurd-boot.scm | ||
icecat-extension.scm | ||
image.scm | ||
install.scm | ||
jami-service.scm | ||
linux-boot.scm | ||
linux-container.scm | ||
linux-initrd.scm | ||
linux-modules.scm | ||
locale.scm | ||
marionette.scm | ||
secret-service.scm | ||
shepherd.scm | ||
svg.scm |