Aleksa Sarai ebcef3e651 specconv: temporarily allow userns path and mapping if they match ...

It turns out that the error added in commit 09822c3da8 ("configs:
disallow ambiguous userns and timens configurations") causes issues with
containerd and CRIO because they pass both userns mappings and a userns
path.

These configurations are broken, but to avoid the regression in this one
case, output a warning to tell the user that the configuration is
incorrect but we will continue to use it if and only if the configured
mappings are identical to the mappings of the provided namespace.

Fixes: 09822c3da8 ("configs: disallow ambiguous userns and timens configurations")
Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

2023-12-10 20:49:43 +11:00

..

example.go

runc: do not set inheritable capabilities

2022-05-12 08:14:50 +10:00

spec_linux_test.go

specconv: temporarily allow userns path and mapping if they match

2023-12-10 20:49:43 +11:00

spec_linux.go

specconv: temporarily allow userns path and mapping if they match

2023-12-10 20:49:43 +11:00