74 lines
2.3 KiB
Go
74 lines
2.3 KiB
Go
package system
|
|
|
|
import (
|
|
"os"
|
|
"os/exec"
|
|
|
|
"github.com/containers/common/pkg/completion"
|
|
"github.com/containers/podman/v3/cmd/podman/registry"
|
|
"github.com/containers/podman/v3/pkg/domain/entities"
|
|
"github.com/containers/podman/v3/pkg/rootless"
|
|
"github.com/pkg/errors"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
var (
|
|
unshareOptions = entities.SystemUnshareOptions{}
|
|
unshareDescription = "Runs a command in a modified user namespace."
|
|
unshareCommand = &cobra.Command{
|
|
Annotations: map[string]string{registry.EngineMode: registry.ABIMode},
|
|
Use: "unshare [options] [COMMAND [ARG...]]",
|
|
Short: "Run a command in a modified user namespace",
|
|
Long: unshareDescription,
|
|
RunE: unshare,
|
|
ValidArgsFunction: completion.AutocompleteDefault,
|
|
Example: `podman unshare id
|
|
podman unshare cat /proc/self/uid_map,
|
|
podman unshare podman-script.sh`,
|
|
}
|
|
)
|
|
|
|
func init() {
|
|
registry.Commands = append(registry.Commands, registry.CliCommand{
|
|
Command: unshareCommand,
|
|
})
|
|
flags := unshareCommand.Flags()
|
|
flags.SetInterspersed(false)
|
|
flags.BoolVar(&unshareOptions.RootlessCNI, "rootless-cni", false, "Join the rootless network namespace used for CNI networking")
|
|
}
|
|
|
|
func unshare(cmd *cobra.Command, args []string) error {
|
|
if isRootless := rootless.IsRootless(); !isRootless {
|
|
return errors.Errorf("please use unshare with rootless")
|
|
}
|
|
// exec the specified command, if there is one
|
|
if len(args) < 1 {
|
|
// try to exec the shell, if one's set
|
|
shell, shellSet := os.LookupEnv("SHELL")
|
|
if !shellSet {
|
|
return errors.Errorf("no command specified and no $SHELL specified")
|
|
}
|
|
args = []string{shell}
|
|
}
|
|
|
|
err := registry.ContainerEngine().Unshare(registry.Context(), args, unshareOptions)
|
|
if err != nil {
|
|
if exitError, ok := err.(*exec.ExitError); ok {
|
|
// the user command inside the unshare env has failed
|
|
// we set the exit code, do not return the error to the user
|
|
// otherwise "exit status X" will be printed
|
|
registry.SetExitCode(exitError.ExitCode())
|
|
return nil
|
|
}
|
|
// cmd.Run() can return fs.ErrNotExist, fs.ErrPermission or exec.ErrNotFound
|
|
// follow podman run/exec standard with the exit codes
|
|
if errors.Is(err, os.ErrNotExist) || errors.Is(err, exec.ErrNotFound) {
|
|
registry.SetExitCode(127)
|
|
} else if errors.Is(err, os.ErrPermission) {
|
|
registry.SetExitCode(126)
|
|
}
|
|
return err
|
|
}
|
|
return nil
|
|
}
|