From: Christian Brauner <brauner@kernel.org>
Date: Wed, 30 Nov 2022 15:05:31 +0000 (+0100)
Subject: TODO: add unprivileged nspawn item
X-Git-Tag: v253-rc1~409
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=3734fec7278000e2d9203374daeea8c05ce90b71;p=thirdparty%2Fsystemd.git

TODO: add unprivileged nspawn item

Signed-off-by: Christian Brauner (Microsoft) <brauner@kernel.org>
---

diff --git a/TODO b/TODO
index 4ca46a0556c..22fcf663854 100644
--- a/TODO
+++ b/TODO
@@ -2234,6 +2234,7 @@ Features:
     investigate whether creating the inner child with CLONE_PARENT isn't better.
   - Reduce the number of sockets that are currently in use and just rely on one
     or two sockets.
+  - Support running nspawn as an unprivileged user.
 
 * machined: add API to acquire UID range. add API to mount/dissect loopback
   file. Both protected by PK. Then make nspawn use these APIs to run