]> git.ipfire.org Git - thirdparty/systemd.git/commitdiff
vmspawn: Drop --sandbox=chroot from virtiofsd command line
authorDaan De Meyer <daan@amutable.com>
Mon, 23 Mar 2026 20:58:28 +0000 (21:58 +0100)
committerLuca Boccassi <luca.boccassi@gmail.com>
Tue, 24 Mar 2026 11:21:02 +0000 (11:21 +0000)
It's unclear why I added this in fd05c6c7593c5e36864d8784df91b878bbf991ab,
but it breaks bind mounting regular directories via --bind,
so drop it again since it's not actually required to make virtiofsd
work with the foreign UID range.

src/vmspawn/vmspawn.c

index cacfc15f7e768a97d85d72e2fbf8c36878acedda..c114693d91129ac2b81e5c7e68c2efd5f4a08aab 100644 (file)
@@ -1558,7 +1558,6 @@ static int start_virtiofsd(
                         "--shared-dir", source_uid == FOREIGN_UID_MIN ? "/run/systemd/mount-rootfs" : directory,
                         "--xattr",
                         "--fd", sockstr,
-                        "--sandbox=chroot",
                         "--no-announce-submounts");
         if (!argv)
                 return log_oom();