Akihiro Suda 382eba4354 Support recursive mount attrs ("rro", "rnosuid", "rnodev", ...) ...

The new mount option "rro" makes the mount point recursively read-only,
by calling `mount_setattr(2)` with `MOUNT_ATTR_RDONLY` and `AT_RECURSIVE`.
https://man7.org/linux/man-pages/man2/mount_setattr.2.html

Requires kernel >= 5.12.

The "rro" option string conforms to the proposal in util-linux/util-linux Issue 1501.

Fix issue 2823

Similary, this commit also adds the following mount options:
- rrw
- r[no]{suid,dev,exec,relatime,atime,strictatime,diratime,symfollow}

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>

2021-12-07 17:39:57 +09:00

..

validate

Fix the conversion of sysctl variable dots and slashes

2021-11-04 11:45:15 +08:00

blkio_device.go

libcontainer: add initial support for cgroups v2

2019-09-05 13:02:25 +02:00

cgroup_linux.go

chown cgroup to process uid in container namespace

2021-11-30 08:52:59 +10:00

cgroup_unsupported.go

*: add go-1.17+ go:build tags

2021-08-30 20:58:22 -07:00

config_linux_test.go

Use gofumpt to format code

2021-06-01 12:17:27 -07:00

config_linux.go

Replace fmt.Errorf w/o %-style to errors.New

2021-06-22 11:42:07 -07:00

config_test.go

Remove io/ioutil use

2021-10-14 13:46:02 -07:00

config.go

Add runc features command

2021-11-30 16:40:39 +09:00

configs_fuzzer.go

*: add go-1.17+ go:build tags

2021-08-30 20:58:22 -07:00

hugepage_limit.go

Adjust runc to new opencontainers/specs version

2015-10-03 12:25:33 +02:00

intelrdt.go

libcontainer/intelrdt: support ClosID parameter

2021-08-09 15:58:03 +03:00

interface_priority_map.go

Move libcontainer into subdirectory

2015-06-21 19:29:15 -07:00

mount.go

Support recursive mount attrs ("rro", "rnosuid", "rnodev", ...)

2021-12-07 17:39:57 +09:00

namespaces_linux.go

use string-concatenation instead of sprintf for simple cases

2020-09-30 10:51:59 +02:00

namespaces_syscall_unsupported.go

*: add go-1.17+ go:build tags

2021-08-30 20:58:22 -07:00

namespaces_syscall.go

*: add go-1.17+ go:build tags

2021-08-30 20:58:22 -07:00

namespaces_unsupported.go

*: add go-1.17+ go:build tags

2021-08-30 20:58:22 -07:00

namespaces.go

Move libcontainer into subdirectory

2015-06-21 19:29:15 -07:00

network.go

libcontainer/configs: add / fix godoc (golint)

2021-06-02 17:44:11 +02:00

rdma.go

Add support for rdma cgroup introduced in Linux Kernel 4.11

2021-08-23 12:25:33 +05:30