TODO: add unprivileged nspawn item

Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>

diff --git a/TODO b/TODO
index 4ca46a0556cda71bc52bd629897e8e656cbb19bd..22fcf663854dc161cf69a8ecc899422f99771fc6 100644 (file)
--- a/TODO
+++ b/TODO
@@ -2234,6 +2234,7 @@ Features:
     investigate whether creating the inner child with CLONE_PARENT isn't better.
   - Reduce the number of sockets that are currently in use and just rely on one
     or two sockets.
+  - Support running nspawn as an unprivileged user.
 
 * machined: add API to acquire UID range. add API to mount/dissect loopback
   file. Both protected by PK. Then make nspawn use these APIs to run