Aleksa Sarai e65d4cac66 specconv: temporarily allow userns path and mapping if they match ...

(This is a cherry-pick of ebcef3e651e61aeee96546301d8db9e92b505ce6.)

It turns out that the error added in commit 09822c3da8 ("configs:
disallow ambiguous userns and timens configurations") causes issues with
containerd and CRIO because they pass both userns mappings and a userns
path.

These configurations are broken, but to avoid the regression in this one
case, output a warning to tell the user that the configuration is
incorrect but we will continue to use it if and only if the configured
mappings are identical to the mappings of the provided namespace.

Fixes: 09822c3da8 ("configs: disallow ambiguous userns and timens configurations")
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2023-12-14 12:17:17 +11:00

..

userns_fuzzer.go

*: add go-1.17+ go:build tags

2021-08-30 20:58:22 -07:00

userns_linux_test.go

*: rm redundant linux build tag

2021-08-30 20:15:00 -07:00

userns_linux.go

libcontainer/system: move userns utilities to separate package

2021-04-04 22:42:03 +02:00

userns_maps_linux.go

specconv: temporarily allow userns path and mapping if they match

2023-12-14 12:17:17 +11:00

userns_maps.c

*: actually support joining a userns with a new container

2023-12-14 11:56:33 +11:00

userns_unsupported.go

*: add go-1.17+ go:build tags

2021-08-30 20:58:22 -07:00

userns.go

libcontainer/system: move userns utilities to separate package

2021-04-04 22:42:03 +02:00