-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update devices_unix.go for LXD #1327
Conversation
@CarltonSemple can you sign your commit with the DCO? |
getDevices() has been updated to skip `/dev/.lxc` and `/dev/.lxd-mounts`, which was breaking privileged Docker containers running on runC, inside of LXD managed Linux Containers Signed-off-by: Carlton-Semple <carlton.semple@ibm.com>
0b8724d
to
9a7e5a9
Compare
@crosbymichael sure thing |
d604159
to
9a7e5a9
Compare
libcontainer/devices/devices_unix.go
Outdated
@@ -75,7 +75,7 @@ func getDevices(path string) ([]*configs.Device, error) { | |||
switch { | |||
case f.IsDir(): | |||
switch f.Name() { | |||
case "pts", "shm", "fd", "mqueue": | |||
case "pts", "shm", "fd", "mqueue", ".lxc", ".lxd-mounts": |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You better link the issue as comment, otherwise it'll be hard to understand what they are for normal runc users.
/ping @CarltonSemple |
Signed-off-by: Carlton-Semple <carlton.semple@ibm.com>
LGTM @CarltonSemple Next time you can squash your commits for such changes, thanks. |
getDevices() has been updated to skip
/dev/.lxc
and/dev/.lxd-mounts
, which was breaking privileged Docker containers running on runC inside of LXD managed Linux Containers.See https://github.com/lxc/lxd/issues/2825