From 3734fec7278000e2d9203374daeea8c05ce90b71 Mon Sep 17 00:00:00 2001 From: Christian Brauner Date: Wed, 30 Nov 2022 16:05:31 +0100 Subject: [PATCH] TODO: add unprivileged nspawn item Signed-off-by: Christian Brauner (Microsoft) --- TODO | 1 + 1 file changed, 1 insertion(+) diff --git a/TODO b/TODO index 4ca46a0556c..22fcf663854 100644 --- a/TODO +++ b/TODO @@ -2234,6 +2234,7 @@ Features: investigate whether creating the inner child with CLONE_PARENT isn't better. - Reduce the number of sockets that are currently in use and just rely on one or two sockets. + - Support running nspawn as an unprivileged user. * machined: add API to acquire UID range. add API to mount/dissect loopback file. Both protected by PK. Then make nspawn use these APIs to run -- 2.47.3