podman/libpod
Adrian Reber 220e169cc1
Provide correct SELinux mount-label for restored container
Restoring a container from a checkpoint archive creates a complete
new root file-system. This file-system needs to have the correct SELinux
label or most things in that restored container will fail. Running
processes are not as problematic as newly exec()'d process (internally
or via 'podman exec').

This patch tells the storage setup which label should be used to mount
the container's root file-system.

Signed-off-by: Adrian Reber <areber@redhat.com>
2019-06-25 14:55:11 +02:00
..
common Set blob cache directory based on GraphDriver 2019-03-29 08:27:33 -04:00
driver Begin to break up pkg/inspect 2019-06-03 15:54:53 -04:00
events set default event logger based on build tags 2019-05-14 16:17:11 -05:00
image Merge pull request #3257 from weirdwiz/load 2019-06-17 22:14:26 +02:00
layers Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
lock Build cgo files with -Wall -Werror 2019-06-21 10:14:19 +02:00
boltdb_state.go Avoid a read-write transaction on DB init 2019-06-20 10:17:38 -04:00
boltdb_state_internal.go Merge pull request #3378 from mheon/multiple_runtimes 2019-06-21 14:46:54 +02:00
boltdb_state_linux.go podman-remote inspect 2019-01-18 15:43:11 -06:00
boltdb_state_unsupported.go podman-remote inspect 2019-01-18 15:43:11 -06:00
common_test.go podman-remote inspect 2019-01-18 15:43:11 -06:00
container.go Track if a container is restored from an exported checkpoint 2019-06-25 14:55:11 +02:00
container_api.go Fix a segfault in 'podman ps --sync' 2019-06-24 09:26:03 -04:00
container_attach_linux.go Ensure that start() in StartAndAttach() is locked 2019-05-14 14:54:21 -04:00
container_attach_unsupported.go Ensure that start() in StartAndAttach() is locked 2019-05-14 14:54:21 -04:00
container_commit.go Begin adding support for multiple OCI runtimes 2019-06-19 17:08:43 -04:00
container_graph.go pod infra container is started before a container in a pod is run, started, or attached. 2019-02-15 16:39:24 -05:00
container_graph_test.go Update unit tests to use in-memory lock manager 2019-01-04 09:51:09 -05:00
container_inspect.go Fix gofmt 2019-06-21 15:25:06 -04:00
container_internal.go Provide correct SELinux mount-label for restored container 2019-06-25 14:55:11 +02:00
container_internal_linux.go rootless: add an entry to /etc/hosts when using slirp4netns 2019-06-24 10:12:33 +02:00
container_internal_test.go Potentially breaking: Make hooks sort order locale-independent 2019-04-09 21:08:44 +02:00
container_internal_unsupported.go Make sure buildin volumes have the same ownership and permissions as image 2019-03-15 10:44:44 -04:00
container_linux.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
container_log.go Add --follow to journald ctr logging 2019-05-28 11:14:08 -04:00
container_log_linux.go Add --follow to journald ctr logging 2019-05-28 11:14:08 -04:00
container_log_unsupported.go Address comments 2019-05-28 11:10:57 -04:00
container_top_linux.go rootless: fix top huser and hgroup 2019-05-23 14:45:17 +02:00
container_top_unsupported.go podman-top: use containers/psgo 2018-07-19 20:47:52 +00:00
container_unsupported.go Do not fetch pod and ctr State on retrieval in Bolt 2018-07-31 14:19:50 +00:00
diff.go Don't output inodes created to run a container 2018-09-21 09:45:14 +00:00
errors.go oci: use json formatted errors from the runtime 2019-06-13 10:27:06 +02:00
events.go Add System event type and renumber, refresh events 2019-04-25 16:23:09 -04:00
healthcheck.go Begin to break up pkg/inspect 2019-06-03 15:54:53 -04:00
healthcheck_linux.go healthcheck benign error 2019-05-13 08:33:51 -05:00
healthcheck_unsupported.go enable podman-remote on windows 2019-04-30 15:28:39 -05:00
in_memory_state.go Switch Libpod over to new explicit named volumes 2019-04-04 12:26:29 -04:00
info.go Begin adding support for multiple OCI runtimes 2019-06-19 17:08:43 -04:00
kube.go Remove unused return statement in kube volume code 2019-05-21 23:08:39 -04:00
mounts_linux.go set root propagation based on volume properties 2018-11-26 13:55:02 +01:00
networking_linux.go Begin adding support for multiple OCI runtimes 2019-06-19 17:08:43 -04:00
networking_unsupported.go Begin to break up pkg/inspect 2019-06-03 15:54:53 -04:00
oci.go Begin adding support for multiple OCI runtimes 2019-06-19 17:08:43 -04:00
oci_linux.go Merge pull request #3332 from rhatdan/cgroupmanager 2019-06-25 14:54:28 +02:00
oci_unsupported.go enable podman-remote on windows 2019-04-30 15:28:39 -05:00
options.go Make Inspect's mounts struct accurate to Docker 2019-06-12 17:14:21 -04:00
pod.go Purge all use of easyjson and ffjson in libpod 2019-06-13 11:03:20 -04:00
pod_api.go Begin adding support for multiple OCI runtimes 2019-06-19 17:08:43 -04:00
pod_internal.go Add additional debugging when refreshing locks 2019-06-21 16:00:39 -04:00
pod_top_linux.go rootless: fix top huser and hgroup 2019-05-23 14:45:17 +02:00
pod_top_unsupported.go Add podman pod top 2018-08-23 15:01:17 +00:00
runtime.go Merge pull request #3332 from rhatdan/cgroupmanager 2019-06-25 14:54:28 +02:00
runtime_cstorage.go Add --storage flag to 'podman rm' (local only) 2019-06-13 17:02:20 -04:00
runtime_ctr.go Track if a container is restored from an exported checkpoint 2019-06-25 14:55:11 +02:00
runtime_img.go Use standard remove functions for removing pod ctrs 2019-05-10 14:14:29 -04:00
runtime_img_test.go switch projectatomic to containers 2018-08-16 17:12:36 +00:00
runtime_migrate.go system: migrate stops the pause process 2019-05-17 20:48:25 +02:00
runtime_migrate_unsupported.go system: migrate stops the pause process 2019-05-17 20:48:25 +02:00
runtime_pod.go Fixing network ns segfault 2018-08-23 18:16:28 +00:00
runtime_pod_infra_linux.go Fix generation of infra container command 2019-03-10 14:25:13 -04:00
runtime_pod_linux.go When removing pods, free their locks 2019-05-14 10:38:21 -04:00
runtime_pod_unsupported.go Added option to share kernel namespaces in libpod and podman 2018-08-23 18:16:28 +00:00
runtime_renumber.go Add System event type and renumber, refresh events 2019-04-25 16:23:09 -04:00
runtime_volume.go Add event logging to libpod, even display to podman 2019-03-11 15:08:59 -05:00
runtime_volume_linux.go Use standard remove functions for removing pod ctrs 2019-05-10 14:14:29 -04:00
runtime_volume_unsupported.go Add gating tasks 2019-03-13 12:10:35 -05:00
state.go Switch Libpod over to new explicit named volumes 2019-04-04 12:26:29 -04:00
state_test.go Add ability to rewrite pod configs in the database 2019-02-21 10:51:42 -05:00
stats.go Add ability for ubuntu to be tested 2018-10-03 12:45:37 -05:00
stats_config.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
stats_unsupported.go changes to allow for darwin compilation 2018-06-29 20:44:09 +00:00
storage.go OpenTracing support added to start, stop, run, create, pull, and ps 2019-02-18 09:57:08 -05:00
util.go util: fix race condition in WaitForFile 2019-05-20 19:40:15 +02:00
util_linux.go Default to SELinux private label for play kube mounts 2019-03-28 09:54:31 -04:00
util_test.go Stage3 Image Library 2018-03-14 20:21:31 +00:00
util_unsupported.go Default to SELinux private label for play kube mounts 2019-03-28 09:54:31 -04:00
version.go Move installPrefix and etcDir into runtime.go 2019-06-14 17:42:05 -05:00
volume.go Purge all use of easyjson and ffjson in libpod 2019-06-13 11:03:20 -04:00
volume_internal.go Remove locks from volumes 2019-02-21 10:51:42 -05:00