mirror of https://github.com/containers/podman.git
Merge pull request #7306 from mheon/private_mount
Change /sys/fs/cgroup/systemd mount to rprivate
This commit is contained in:
commit
acae04aaaf
|
@ -626,7 +626,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro
|
||||||
Destination: "/sys/fs/cgroup/systemd",
|
Destination: "/sys/fs/cgroup/systemd",
|
||||||
Type: "bind",
|
Type: "bind",
|
||||||
Source: "/sys/fs/cgroup/systemd",
|
Source: "/sys/fs/cgroup/systemd",
|
||||||
Options: []string{"bind", "nodev", "noexec", "nosuid", "rslave"},
|
Options: []string{"bind", "nodev", "noexec", "nosuid", "rprivate"},
|
||||||
}
|
}
|
||||||
g.AddMount(systemdMnt)
|
g.AddMount(systemdMnt)
|
||||||
g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
|
g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
|
||||||
|
|
Loading…
Reference in New Issue