]> git.ipfire.org Git - thirdparty/systemd.git/commit
homed: when setting up an idmapping map foreign UID range on itself
authorLennart Poettering <lennart@poettering.net>
Fri, 24 Jan 2025 15:54:05 +0000 (16:54 +0100)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Fri, 24 Jan 2025 20:31:59 +0000 (05:31 +0900)
commit1153d2d2ccdade4596abad1e520d7fb5283c19f2
treef6864e471391cb49d19a37d3c22710e9d0af7bc0
parent9b3715d529e4eba79e19c87e85583f7be5ee2c95
homed: when setting up an idmapping map foreign UID range on itself

Now that nspawn can run unprivileged off directory trees owned by
the new "foreign" UID range let's make sure homed actually allows
files owned by that range in the home directories.

This is not enough to make nspawn just work in homed home dirs
unfortunately though. that's because homed applies an idmapping, and
nspawn would need to then to take that idmapped mount and apply another
one, and the kernel simply doesn't support stacked idmapped mounts.
There's work ongoing to address that in the kernel.

However, this is a first step, and should be enough to make things just
work should the kernel eventually support stacked idmapped mounts.
src/home/homework-mount.c