forked from lix-project/lix
fb2f7f5dcc
This didn't work because sandboxing doesn't work in Docker. However, the sandboxing check is done lazily - after clone(CLONE_NEWNS) fails, we retry with sandboxing disabled. But at that point, we've already done UID allocation under the assumption that user namespaces are enabled. So let's get rid of the "goto fallback" logic and just detect early whether user / mount namespaces are enabled. This commit also gets rid of a compatibility hack for some ancient Linux kernels (<2.13). |
||
|---|---|---|
| .. | ||
| derivation-goal.cc | ||
| derivation-goal.hh | ||
| drv-output-substitution-goal.cc | ||
| drv-output-substitution-goal.hh | ||
| entry-points.cc | ||
| goal.cc | ||
| goal.hh | ||
| hook-instance.cc | ||
| hook-instance.hh | ||
| local-derivation-goal.cc | ||
| local-derivation-goal.hh | ||
| personality.cc | ||
| personality.hh | ||
| sandbox-defaults.sb | ||
| sandbox-minimal.sb | ||
| sandbox-network.sb | ||
| substitution-goal.cc | ||
| substitution-goal.hh | ||
| worker.cc | ||
| worker.hh | ||