Stefan Hajnoczi fd9279ec99 virtiofsd: probe unshare(CLONE_FS) and print an error ... An assertion failure is raised during request processing if unshare(CLONE_FS) fails. Implement a probe at startup so the problem can be detected right away. Unfortunately Docker/Moby does not include unshare in the seccomp.json list unless CAP_SYS_ADMIN is given. Other seccomp.json lists always include unshare (e.g. podman is unaffected): https://raw.githubusercontent.com/seccomp/containers-golang/master/seccomp.json Use "docker run --security-opt seccomp=path/to/seccomp.json ..." if the default seccomp.json is missing unshare. Cc: Misono Tomohiro <misono.tomohiro@jp.fujitsu.com> Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> Message-Id: <20200727190223.422280-4-stefanha@redhat.com> Reviewed-by: Misono Tomohiro <misono.tomohiro@jp.fujitsu.com> Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>		2020-08-28 13:34:52 +01:00
..
virtiofsd	virtiofsd: probe unshare(CLONE_FS) and print an error	2020-08-28 13:34:52 +01:00
meson.build	tools/virtiofsd: convert to Meson	2020-08-21 06:30:09 -04:00