Documentation
¶
Index ¶
- Constants
- func ExecRunnable(cmd Runnable, cleanup func())
- func GetHostIDMappings(pid string) ([]specs.LinuxIDMapping, []specs.LinuxIDMapping, error)
- func GetRootlessGID() int
- func GetRootlessUID() int
- func GetSubIDMappings(user, group string) ([]specs.LinuxIDMapping, []specs.LinuxIDMapping, error)
- func HasCapSysAdmin() (bool, error)
- func HomeDir() (string, error)
- func IsRootless() bool
- func IsSetID(path string, modeid os.FileMode, capid capability.Cap) (bool, error)
- func MaybeReexecUsingUserNamespace(evenForRoot bool)
- func ParseIDMappings(uidmap, gidmap []string) ([]idtools.IDMap, []idtools.IDMap, error)
- func RootlessEnv() []string
- type Cmd
- type Runnable
Constants ¶
const (
// UsernsEnvName is the environment variable, if set indicates in rootless mode
UsernsEnvName = "_CONTAINERS_USERNS_CONFIGURED"
)
Variables ¶
This section is empty.
Functions ¶
func ExecRunnable ¶
func ExecRunnable(cmd Runnable, cleanup func())
ExecRunnable runs the specified unshare command, captures its exit status, and exits with the same status.
func GetHostIDMappings ¶
GetHostIDMappings reads mappings for the specified process (or the current process if pid is "self" or an empty string) from the kernel.
func GetRootlessGID ¶ added in v1.51.0
func GetRootlessGID() int
GetRootlessGID returns the GID of the user in the parent userNS
func GetRootlessUID ¶
func GetRootlessUID() int
GetRootlessUID returns the UID of the user in the parent userNS
func GetSubIDMappings ¶
GetSubIDMappings reads mappings from /etc/subuid and /etc/subgid.
func HasCapSysAdmin ¶ added in v0.46.1
HasCapSysAdmin returns whether the current process has CAP_SYS_ADMIN.
func IsSetID ¶ added in v0.46.1
IsSetID checks if specified path has correct FileMode (Setuid|SETGID) or the matching file capability
func MaybeReexecUsingUserNamespace ¶
func MaybeReexecUsingUserNamespace(evenForRoot bool)
MaybeReexecUsingUserNamespace re-exec the process in a new namespace
func ParseIDMappings ¶
ParseIDMappings parses mapping triples.
func RootlessEnv ¶
func RootlessEnv() []string
RootlessEnv returns the environment settings for the rootless containers
Types ¶
type Cmd ¶
type Cmd struct {
*exec.Cmd
UseNewuidmap bool
UidMappings []specs.LinuxIDMapping // nolint: revive,golint
UseNewgidmap bool
GidMappings []specs.LinuxIDMapping // nolint: revive,golint
GidMappingsEnableSetgroups bool
Setsid bool
Setpgrp bool
Ctty *os.File
OOMScoreAdj *int
Hook func(pid int) error
}
Cmd wraps an exec.Cmd created by the reexec package in unshare(), and handles setting ID maps and other related settings by triggering initialization code in the child.
Source Files