jail: add support for userns and cgroupsns
authorDaniel Golle <daniel@makrotopia.org>
Fri, 20 Mar 2020 18:20:51 +0000 (18:20 +0000)
committerDaniel Golle <daniel@makrotopia.org>
Thu, 9 Apr 2020 11:45:29 +0000 (12:45 +0100)
commit6f3dbd283bbdc6f981be5d36d609ee682051f856
tree9cfda2167da30799f6c0eba0e44bd322160c8256
parent2188d81fdd47d96198cab7828808807d0593bf99
jail: add support for userns and cgroupsns

Add options to have jailed process inside new user namespace and
cgroups namespace.
Currently only the root user inside the container is mapped.
Also, mounting /proc currently still fails in the new user namespace
with permission denied for unknown reasons.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
jail/jail.c
service/instance.c
service/instance.h