units: disable /dev/hugepages in private user namespaces

The mount fails, even though CAP_SYS_ADMIN is granted.

diff --git a/units/dev-hugepages.mount b/units/dev-hugepages.mount
index 882adb4545ae5b1bcd7bc7fe5bd3bab286d141f1..489cc777e40a2e2233c5247530640106d2770a33 100644 (file)
--- a/units/dev-hugepages.mount
+++ b/units/dev-hugepages.mount
@@ -13,6 +13,7 @@ DefaultDependencies=no
 Before=sysinit.target
 ConditionPathExists=/sys/kernel/mm/hugepages
 ConditionCapability=CAP_SYS_ADMIN
+ConditionVirtualization=!private-users
 
 [Mount]
 What=hugetlbfs