puck/lix
0
0
Fork 0
forked from lix-project/lix
Code Pull requests Activity

local-derivation-goal.cc: add comment re: CLONE_NEWUSER

Browse source 
local-derivation-goal.cc contains a comment stating that "Some distros
patch Linux to not allow unprivileged user namespaces."  Let's give a
pointer to a common version of this patch for those who want more
details about this failure mode.
This commit is contained in:
Adam Joseph 2022-07-17 01:23:27 -07:00
parent 8d35f387dc
commit 6fc56318bf
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/libstore/build/local-derivation-goal.cc
View file

@ -845,6 +845,7 @@ void LocalDerivationGoal::startBuilder()
/* Some distros patch Linux to not allow unprivileged
* user namespaces. If we get EPERM or EINVAL, try
* without CLONE_NEWUSER and see if that works.
* Details: https://salsa.debian.org/kernel-team/linux/-/commit/d98e00eda6bea437e39b9e80444eee84a32438a6
*/
usingUserNamespace = false;
flags &= ~CLONE_NEWUSER;