From 2e0a4795f6a0016832d8fc51884abce4d01a8a58 Mon Sep 17 00:00:00 2001 From: Ophestra Date: Mon, 25 Aug 2025 23:24:54 +0900 Subject: container/initbind: optional ensure host directory This is used for ensuring persistent data directories specific to the container. Signed-off-by: Ophestra --- container/initbind.go | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) (limited to 'container/initbind.go') diff --git a/container/initbind.go b/container/initbind.go index 18f44936..bda8cb6c 100644 --- a/container/initbind.go +++ b/container/initbind.go @@ -23,8 +23,6 @@ type BindMountOp struct { Flags int } -func (b *BindMountOp) Valid() bool { return b != nil && b.Source != nil && b.Target != nil } - const ( // BindOptional skips nonexistent host paths. BindOptional = 1 << iota @@ -32,9 +30,23 @@ const ( BindWritable // BindDevice allows access to devices (special files) on this filesystem. BindDevice + // BindEnsure attempts to create the host path if it does not exist. + BindEnsure ) +func (b *BindMountOp) Valid() bool { + return b != nil && + b.Source != nil && b.Target != nil && + b.Flags&(BindOptional|BindEnsure) != (BindOptional|BindEnsure) +} + func (b *BindMountOp) early(_ *setupState, k syscallDispatcher) error { + if b.Flags&BindEnsure != 0 { + if err := k.mkdirAll(b.Source.String(), 0700); err != nil { + return wrapErrSelf(err) + } + } + if pathname, err := k.evalSymlinks(b.Source.String()); err != nil { if os.IsNotExist(err) && b.Flags&BindOptional != 0 { // leave sourceFinal as nil -- cgit v1.3.1