|
|
f93050 |
From 7b3cf0c085361546f45cf86391eb9809229d0ca1 Mon Sep 17 00:00:00 2001
|
|
|
f93050 |
From: Matthew Heon <mheon@redhat.com>
|
|
|
f93050 |
Date: Wed, 12 Aug 2020 09:15:02 -0400
|
|
|
f93050 |
Subject: [PATCH] Change /sys/fs/cgroup/systemd mount to rprivate
|
|
|
f93050 |
|
|
|
f93050 |
I used the wrong propagation first time around because I forgot
|
|
|
f93050 |
that rprivate is the default propagation. Oops. Switch to
|
|
|
f93050 |
rprivate so we're using the default.
|
|
|
f93050 |
|
|
|
f93050 |
Signed-off-by: Matthew Heon <mheon@redhat.com>
|
|
|
f93050 |
---
|
|
|
f93050 |
libpod/container_internal_linux.go | 2 +-
|
|
|
f93050 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
f93050 |
|
|
|
f93050 |
diff --git a/libpod/container_internal_linux.go b/libpod/container_internal_linux.go
|
|
|
f93050 |
index e2bc4e50ff..fdee3877cb 100644
|
|
|
f93050 |
--- a/libpod/container_internal_linux.go
|
|
|
f93050 |
+++ b/libpod/container_internal_linux.go
|
|
|
f93050 |
@@ -626,7 +626,7 @@ func (c *Container) setupSystemd(mounts []spec.Mount, g generate.Generator) erro
|
|
|
f93050 |
Destination: "/sys/fs/cgroup/systemd",
|
|
|
f93050 |
Type: "bind",
|
|
|
f93050 |
Source: "/sys/fs/cgroup/systemd",
|
|
|
f93050 |
- Options: []string{"bind", "nodev", "noexec", "nosuid"},
|
|
|
f93050 |
+ Options: []string{"bind", "nodev", "noexec", "nosuid", "rprivate"},
|
|
|
f93050 |
}
|
|
|
f93050 |
g.AddMount(systemdMnt)
|
|
|
f93050 |
g.AddLinuxMaskedPaths("/sys/fs/cgroup/systemd/release_agent")
|