Aleksa Sarai 5ae88daf06 idmap: allow arbitrary idmap mounts regardless of userns configuration ...

With the rework of nsexec.c to handle MOUNT_ATTR_IDMAP in our Go code we
can now handle arbitrary mappings without issue, so remove the primary
artificial limit of mappings (must use the same mapping as the
container's userns) and add some tests.

We still only support idmap mounts for bind-mounts because configuring
mappings for other filesystems would require switching our entire mount
machinery to the new mount API. The current design would easily allow
for this but we would need to convert new mount options entirely to the
fsopen/fsconfig/fsmount API. This can be done in the future.

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2023-12-14 11:36:41 +11:00

..

fuzzing

tests: Fix fuzzer location in oss-fuzz config

2023-03-23 03:21:17 +08:00

integration

idmap: allow arbitrary idmap mounts regardless of userns configuration

2023-12-14 11:36:41 +11:00

rootless.sh

tests/rootless.sh: drop set -x

2023-06-08 09:23:29 -07:00