From: Lennart Poettering <lennart@poettering.net>
Date: Fri, 23 Jun 2023 15:50:39 +0000 (+0200)
Subject: namespace: when mounting new proc instance, bind mount submounts of source over
X-Git-Tag: v254-rc1~126^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=fb0e106f8e77c427ed5a15b72be09344873e351a;p=thirdparty%2Fsystemd.git

namespace: when mounting new proc instance, bind mount submounts of source over

Fixes: #28059
---

diff --git a/src/core/namespace.c b/src/core/namespace.c
index bf01c5e0284..f39ab2f4689 100644
--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -1178,6 +1178,10 @@ static int mount_procfs(const MountEntry *m, const NamespaceInfo *ns_info) {
                 }
         } else if (r < 0)
                 return r;
+        else
+                /* We mounted a new instance now. Let's bind mount the children over now. This matters for
+                 * nspawn where a bunch of files are overmounted, in particular the boot id */
+                (void) bind_mount_submounts("/proc", entry_path);
 
         return 1;
 }