From b99ed943865cd3e8b3ab0cbcb8e04720b158799c Mon Sep 17 00:00:00 2001 From: Ophestra Umiker Date: Wed, 9 Oct 2024 00:22:48 +0900 Subject: helper/bwrap: pass --unshare-user when unshare everything Bubblewrap apparently requires --unshare-user even when --unshare-all is set to apply --disable-userns. This behaviour is not clearly documented. Signed-off-by: Ophestra Umiker --- helper/bwrap/config_test.go | 1 + 1 file changed, 1 insertion(+) (limited to 'helper/bwrap/config_test.go') diff --git a/helper/bwrap/config_test.go b/helper/bwrap/config_test.go index d43c671d..53265714 100644 --- a/helper/bwrap/config_test.go +++ b/helper/bwrap/config_test.go @@ -49,6 +49,7 @@ func TestConfig_Args(t *testing.T) { }, want: []string{ "--unshare-all", + "--unshare-user", "--disable-userns", "--assert-userns-disabled", "--clearenv", -- cgit v1.3.1