Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Merged] features-linux: Expose idmap information #1219

Closed
wants to merge 1 commit into from
Closed

[Merged] features-linux: Expose idmap information #1219

wants to merge 1 commit into from

Commits on Aug 23, 2023

  1. features-linux: Expose idmap information 

    High level container runtimes sometimes need to know if the OCI runtime
supports idmap mounts or not, as the OCI runtime silently ignores
unknown fields.

This means that if it doesn't support idmap mounts, a container with
userns will be started, without idmap mounts, and the files created on
the volumes will have a "garbage" owner/group. Furthermore, as the
userns mapping is not guaranteed to be stable over time, it will be
completely unusable.

Let's expose idmap support in the features subcommand, so high level
container runtimes use the feature safely.

Signed-off-by: Rodrigo Campos <[email protected]>
    @rata
    rata committed Aug 23, 2023
    Configuration menu
    Copy the full SHA
    f329913 View commit details
    Browse the repository at this point in the history