google/gvisor

Implement /proc/sys/user/max_user_namespaces ?

Offen

#11.210 geöffnet am 22.11.2024

 (5 Kommentare) (1 Reaktion) (0 zugewiesene Personen)Go (1.061 Forks)batch import
good first issuetype: enhancement

Repository-Metriken

Stars
 (12.713 Sterne)
PR-Merge-Metriken
 (PR-Metriken ausstehend)

Beschreibung

Description

Bubblewrap with option "--disable-userns" enabled fails to run in gvisor due to lack of /proc/sys/user/max_user_namespaces (relevant code). The option "--disable-userns" is set as default by flatpak, so adding /proc/sys/user/max_user_namespaces will make it possible to build and run flatpak in container with gvisor.

Is this feature related to a specific bug?

No response

Do you have a specific solution in mind?

No response

Contributor Guide