me/guix
Archived
1
0
Fork 0
Code Activity

container: Gracefully handle failure to set up user namespaces.

Browse source 
* gnu/build/linux-container.scm (run-container): Exit when the parent
process doesn't say 'ready.
This commit is contained in:
Ludovic Courtès 2016-05-30 22:13:09 +02:00
parent 552ffa021c
commit 4c14d4eaa7
No known key found for this signature in database
GPG key ID: 090B11993D9AEBB5
1 changed files with 12 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
gnu/build/linux-container.scm
View file

@ -214,7 +214,8 @@ host user identifiers to map into the user namespace."
(lambda ()
(close out)
;; Wait for parent to set things up.
(read in)
(match (read in)
('ready
(close in)
(purify-environment)
(when (memq 'mnt namespaces)
@ -222,7 +223,9 @@ host user identifiers to map into the user namespace."
#:mount-/proc? (memq 'pid namespaces)
#:mount-/sys? (memq 'net namespaces)))
;; TODO: Manage capabilities.
(thunk))))
(thunk))
(_ ;parent died or something
(primitive-exit 2))))))
(pid
(when (memq 'user namespaces)
(initialize-user-namespace pid host-uids))