package mountopts

import "github.com/dotcloud/docker/internal/rootless/mountopts"

Index ¶

• func UnprivilegedMountFlags(path string) ([]string, error)

Functions ¶

func UnprivilegedMountFlags ¶

func UnprivilegedMountFlags(path string) ([]string, error)

UnprivilegedMountFlags gets the set of mount flags that are set on the mount that contains the given path and are locked by CL_UNPRIVILEGED. This is necessary to ensure that bind-mounting "with options" will not fail with user namespaces, due to kernel restrictions that require user namespace mounts to preserve CL_UNPRIVILEGED locked flags.

TODO: Move to github.com/moby/sys/mount, and update BuildKit copy of this code as well (https://github.com/moby/buildkit/blob/v0.13.0/util/rootless/mountopts/mountopts_linux.go#L11-L18)

Source Files ¶

mountopts_linux.go