mirror/runc
1
0
Fork 0
mirror of https://github.com/opencontainers/runc.git synced 2026-07-11 06:03:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

memfd-bind: fixup systemd unit file and README

Browse Source 
The example of starting memfd-bind via systemd in README did not work
for me (Fedora 40, systemd 255):

	# systemctl status memfd-bind@/usr/bin/runc
	Invalid unit name "memfd-bind@/usr/bin/runc" escaped as "memfd-bind@-usr-bin-runc" (maybe you should use systemd-escape?).
	○ memfd-bind@-usr-bin-runc.service
	     Loaded: bad-setting (Reason: Unit memfd-bind@-usr-bin-runc.service has a bad unit file setting.)
	     Active: inactive (dead)
	       Docs: https://github.com/opencontainers/runc

So, let's use systemd-escape -p ("path") in the README example,
and use %f in the systemd unit file to prepend the slash to the
filename.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
This commit is contained in:
Kir Kolyshkin
2024-10-08 13:18:55 -07:00
parent f2d56241d8
commit 9e5545876e
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
contrib/cmd/memfd-bind/README.md
+1 -1
View File
@@ -25,7 +25,7 @@ The provided `memfd-bind@.service` file can be used to get systemd to manage
this daemon. You can supply the path like so:
```
% systemctl start memfd-bind@/usr/bin/runc
% systemctl start memfd-bind@$(systemd-escape -p /usr/bin/runc)
```
Thus, there are three ways of protecting against CVE-2019-5736, in order of how