Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1137081

Bug#1030625: autopkgtest: please provide a new restriction for unprivileged unshare/userns

Show all headers | View raw

Quoting Helmut Grohne (2023-02-05 21:23:18)
>  * It must be possible to mount proc in the unshared user+mount+pid
>    namespace.
>    - This should always work but may be restricted by the container
>      technology for some reason.
>    - Test case: unshare -U -m -p -f -r --mount-proc true
>    - Paul tried this in the operational lxc containers. Successfully.
>    - I tried this in a local autopkgtest-unstable lxc container.
>      Successfully (unprivileged).
>    - Johannes reported that this would be the step that fails.

as a datapoint, on salsaci this happens:

+ runuser -u debci -- unshare -U -m -p -f -r --mount-proc true
unshare: mount /proc failed: Operation not permitted

Next I'm trying just to bind-mount /proc... lets see...

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#1030625: autopkgtest: please provide a new restriction for unprivileged unshare/userns Helmut Grohne <helmut@subdivi.de> - 2023-02-05 21:40 +0100
  Bug#1030625: autopkgtest: please provide a new restriction for unprivileged unshare/userns Johannes Schauer Marin Rodrigues <josch@debian.org> - 2023-02-06 12:00 +0100
  Bug#1030625: autopkgtest: please provide a new restriction for unprivileged unshare/userns Johannes Schauer Marin Rodrigues <josch@debian.org> - 2023-02-09 11:10 +0100
    Bug#1030625: autopkgtest: please provide a new restriction for unprivileged unshare/userns Johannes Schauer Marin Rodrigues <josch@debian.org> - 2023-02-10 13:10 +0100
      Bug#1030625: autopkgtest: please provide a new restriction for unprivileged unshare/userns Simon McVittie <smcv@debian.org> - 2023-02-10 16:10 +0100
  Bug#1030625: autopkgtest: please provide a new restriction for unprivileged unshare/userns Simon McVittie <smcv@debian.org> - 2023-02-10 16:30 +0100

csiph-web