]> git.ipfire.org Git - thirdparty/systemd.git/commit
nspawn: add support for owneridmap bind option
authorBenjamin Franzke <benjaminfranzke@googlemail.com>
Fri, 17 Nov 2023 07:03:57 +0000 (08:03 +0100)
committerLennart Poettering <lennart@poettering.net>
Thu, 15 Feb 2024 10:49:54 +0000 (11:49 +0100)
commit614d09a37dc468d126df40ae649092f927196863
tree5a729e36da950ef815bcc0bc5983feeb666a8d59
parent4dcfdd210cf9ea8692f02f2406705120e28e428e
nspawn: add support for owneridmap bind option

owneridmap bind option will map the target directory owner from inside the
container to the owner of the directory bound from the host filesystem.
This will ensure files and directories created in the container will be owned
by the directory owner of the host filesystem. All other users will remain
unmapped. Files to be written as other users in the container will not be
allowed.

Resolves: #27037
man/systemd-nspawn.xml
src/nspawn/nspawn-mount.c
src/nspawn/nspawn.c
src/shared/dissect-image.c
src/shared/mount-util.c
src/shared/mount-util.h
test/units/testsuite-13.nspawn.sh