Skip to content

linux: attempt to make rootfs private too#1520

Merged
giuseppe merged 4 commits intocontainers:mainfrom
giuseppe:improve-make-parent-private
Aug 13, 2024
Merged

linux: attempt to make rootfs private too#1520
giuseppe merged 4 commits intocontainers:mainfrom
giuseppe:improve-make-parent-private

Conversation

@giuseppe
Copy link
Member

commit 6682432 introduced the regression. After that change, crun does not attempt anymore to make the rootfs directory private but starts from its parent directory, causing pivot_root to fail when the rootfs itself is a mountpoint.

Closes: #1514

@packit-as-a-service
Copy link

We were not able to find or create Copr project packit/containers-crun-1520 specified in the config with the following error:

Packit received HTTP 500 Internal Server Error from Copr Service. Check the Copr status page: https://copr.fedorainfracloud.org/status/stats/, or ask for help in Fedora Build System matrix channel https://matrix.to/#/#buildsys:fedoraproject.org.

Unless the HTTP status code above is >= 500, please check your configuration for:

  1. typos in owner and project name (groups need to be prefixed with @)
  2. whether the project name doesn't contain not allowed characters (only letters, digits, underscores, dashes and dots must be used)
  3. whether the project itself exists (Packit creates projects only in its own namespace)
  4. whether Packit is allowed to build in your Copr project
  5. whether your Copr project/group is not private

@giuseppe
Copy link
Member Author

please don't merge until we confirm it fixes #1514

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
commit 6682432 introduced the
regression.  After that change, crun does not attempt anymore to make
the rootfs directory private but starts from its parent directory,
causing pivot_root to fail when the rootfs itself is a mountpoint.

Closes: containers#1514

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
@giuseppe giuseppe force-pushed the improve-make-parent-private branch from 28f456c to 99be8c9 Compare August 13, 2024 14:00
@giuseppe giuseppe marked this pull request as ready for review August 13, 2024 14:00
@giuseppe
Copy link
Member Author

rebased, I'll merge once CI passes

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
@giuseppe giuseppe force-pushed the improve-make-parent-private branch from 99be8c9 to afa829c Compare August 13, 2024 14:21
Copy link
Collaborator

@flouthoc flouthoc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@rhatdan
Copy link
Member

rhatdan commented Aug 13, 2024

LGTM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

4 participants