podman/libpod
Matthew Heon a064cfc99b Ensure correct propagation for cgroupsv1 systemd cgroup
On cgroups v1 systems, we need to mount /sys/fs/cgroup/systemd
into the container. We were doing this with no explicit mount
propagation tag, which means that, under some circumstances, the
shared mount propagation could be chosen - which, combined with
the fact that we need a mount to mask
/sys/fs/cgroup/systemd/release_agent in the container, means we
would leak a never-ending set of mounts under
/sys/fs/cgroup/systemd/ on container restart.

Fortunately, the fix is very simple - hardcode mount propagation
to something that won't leak.

Signed-off-by: Matthew Heon <mheon@redhat.com>
2020-08-11 09:53:36 -04:00
..
common Set blob cache directory based on GraphDriver 2019-03-29 08:27:33 -04:00
define API returns 500 in case network is not found instead of 404 2020-08-02 22:21:28 +08:00
driver removMergeDir from inspect result if not mounted 2019-08-13 15:13:20 -04:00
events Remove some unnecessary []byte to string conversions 2020-08-03 09:13:04 +02:00
filters Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
image Merge pull request #7215 from vrothberg/flatten-the-curve 2020-08-08 07:14:37 -04:00
layers
linkmode Add podman static build 2020-05-11 13:11:07 +02:00
lock Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
logs fix podman logs --tail when log is bigger than pagesize 2020-08-06 20:56:30 +02:00
boltdb_state.go Unconditionally retrieve pod names via API 2020-08-10 10:15:51 -04:00
boltdb_state_internal.go Improve error message when creating a pod/ctr with the same name 2020-08-04 11:39:27 +02:00
boltdb_state_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
boltdb_state_unsupported.go
common_test.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_api.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_commit.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_config.go Ensure WORKDIR from images is created 2020-08-03 14:44:52 -04:00
container_exec.go Ensure that exec errors write exit codes to the DB 2020-08-05 14:30:48 -04:00
container_graph.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_graph_test.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_inspect.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_internal.go volumes: do not recurse when chowning 2020-07-31 10:57:03 +02:00
container_internal_linux.go Ensure correct propagation for cgroupsv1 systemd cgroup 2020-08-11 09:53:36 -04:00
container_internal_linux_test.go Refactor container config 2020-07-23 10:18:14 -04:00
container_internal_test.go Refactor container config 2020-07-23 10:18:14 -04:00
container_internal_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_linux.go
container_log.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_log_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_log_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_top_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_top_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
container_unsupported.go
container_validate.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
diff.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
events.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
healthcheck.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
healthcheck_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
healthcheck_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
in_memory_state.go Unconditionally retrieve pod names via API 2020-08-10 10:15:51 -04:00
info.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
kube.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
mounts_linux.go
networking_linux.go changes to support outbound-addr 2020-08-07 19:34:45 +02:00
networking_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
oci.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
oci_attach_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
oci_attach_linux_cgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_linux_nocgo.go Implement conmon exec 2019-07-22 15:57:23 -04:00
oci_attach_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
oci_conmon.go podman: add new cgroup mode split 2020-06-25 17:16:12 +02:00
oci_conmon_exec_linux.go Fix close fds of exec --preserve-fds 2020-07-31 08:27:12 -04:00
oci_conmon_linux.go fix close fds of run --preserve-fds 2020-07-30 15:32:39 -04:00
oci_conmon_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
oci_missing.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
oci_util.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
options.go Ensure WORKDIR from images is created 2020-08-03 14:44:52 -04:00
pod.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
pod_api.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
pod_internal.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
pod_status.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
pod_top_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
pod_top_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
reset.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime.go Unconditionally retrieve pod names via API 2020-08-10 10:15:51 -04:00
runtime_cstorage.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_ctr.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_img.go Ensure that 'rmi --force' evicts Podman containers 2020-07-30 12:01:05 -04:00
runtime_img_test.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_migrate.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_migrate_unsupported.go Add podman system reset command 2019-11-29 05:34:52 -05:00
runtime_pod.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_pod_infra_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_pod_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_pod_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_renumber.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_volume.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_volume_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
runtime_volume_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
state.go Unconditionally retrieve pod names via API 2020-08-10 10:15:51 -04:00
state_test.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
stats.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
stats_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
storage.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
util.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
util_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
util_test.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
util_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
volume.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
volume_inspect.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
volume_internal.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
volume_internal_linux.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00
volume_internal_unsupported.go Switch all references to github.com/containers/libpod -> podman 2020-07-28 08:23:45 -04:00