only relabel cri managed host mounts
Co-authored-by: Samuel Karp <skarp@amazon.com> Signed-off-by: Michael Crosby <michael@thepasture.io> Signed-off-by: Samuel Karp <skarp@amazon.com>
This commit is contained in:
committed by
Samuel Karp
parent
432ddecaae
commit
9b0303913f
@@ -224,30 +224,6 @@ func WithMounts(osi osinterface.OS, config *runtime.ContainerConfig, extra []*ru
|
||||
}
|
||||
}
|
||||
|
||||
const (
|
||||
etcHosts = "/etc/hosts"
|
||||
etcHostname = "/etc/hostname"
|
||||
resolvConfPath = "/etc/resolv.conf"
|
||||
)
|
||||
|
||||
// WithRelabeledContainerMounts relabels the default container mounts for files in /etc
|
||||
func WithRelabeledContainerMounts(mountLabel string) oci.SpecOpts {
|
||||
return func(ctx context.Context, client oci.Client, _ *containers.Container, s *runtimespec.Spec) (err error) {
|
||||
if mountLabel == "" {
|
||||
return nil
|
||||
}
|
||||
for _, m := range s.Mounts {
|
||||
switch m.Destination {
|
||||
case etcHosts, etcHostname, resolvConfPath:
|
||||
if err := label.Relabel(m.Source, mountLabel, false); err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
}
|
||||
return nil
|
||||
}
|
||||
}
|
||||
|
||||
// Ensure mount point on which path is mounted, is shared.
|
||||
func ensureShared(path string, lookupMount func(string) (mount.Info, error)) error {
|
||||
mountInfo, err := lookupMount(path)
|
||||
|
||||
Reference in New Issue
Block a user