diff options
| author | Ophestra Umiker <cat@ophivana.moe> | 2024-10-09 00:22:48 +0900 |
|---|---|---|
| committer | Ophestra Umiker <cat@ophivana.moe> | 2024-10-09 00:22:48 +0900 |
| commit | b99ed943865cd3e8b3ab0cbcb8e04720b158799c (patch) | |
| tree | c5d8845e8c49fa920a507c4e1fcd51472c29cf2f | |
| parent | c201c30c7fbb329f734aa76f511360d397a48914 (diff) | |
helper/bwrap: pass --unshare-user when unshare everything
Bubblewrap apparently requires --unshare-user even when --unshare-all is set to apply --disable-userns. This behaviour is not clearly documented.
Signed-off-by: Ophestra Umiker <cat@ophivana.moe>
| -rw-r--r-- | helper/bwrap/config.bool.go | 2 | ||||
| -rw-r--r-- | helper/bwrap/config_test.go | 1 |
2 files changed, 2 insertions, 1 deletions
diff --git a/helper/bwrap/config.bool.go b/helper/bwrap/config.bool.go index 81e6ab7b..c30f4df9 100644 --- a/helper/bwrap/config.bool.go +++ b/helper/bwrap/config.bool.go @@ -21,7 +21,7 @@ const ( ) var boolArgs = func() (b [boolC][]string) { - b[UnshareAll] = []string{"--unshare-all"} + b[UnshareAll] = []string{"--unshare-all", "--unshare-user"} b[UnshareUser] = []string{"--unshare-user"} b[UnshareIPC] = []string{"--unshare-ipc"} b[UnsharePID] = []string{"--unshare-pid"} diff --git a/helper/bwrap/config_test.go b/helper/bwrap/config_test.go index d43c671d..53265714 100644 --- a/helper/bwrap/config_test.go +++ b/helper/bwrap/config_test.go @@ -49,6 +49,7 @@ func TestConfig_Args(t *testing.T) { }, want: []string{ "--unshare-all", + "--unshare-user", "--disable-userns", "--assert-userns-disabled", "--clearenv", |