Kir Kolyshkin 65c21f346f libct/cfg/validate: disallow / as rootfs ...

Using host's / as the container rootfs does not work: with a private
mount namespace, pivot_root (or MS_MOVE in case of no-pivot) fails,
and without it, container mounts (such as proc, dev etc.) are mounted
on top of the host ones, effectively breaking the host.

Disallow it.

Add an integration test.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>

2026-10-17 10:30:39 -07:00

..

validate

libct/cfg/validate: disallow / as rootfs

2026-10-17 10:30:39 -07:00

config_linux_test.go

Capitalize [UG]idMappings as [UG]IDMappings

2023-07-21 13:55:34 +02:00

config_linux.go

libct/configs: use pointers for Config methods

2026-01-26 14:17:44 -08:00

config_test.go

Modernize code for Go 1.24

2025-08-27 19:11:02 -07:00

config.go

libct: make MaxCPU exclusive

2026-09-01 14:00:38 -07:00

configs_fuzzer.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

doc.go

libcontainer/configs package doc

2025-06-18 15:52:30 +01:00

intelrdt.go

libcontainer/intelrdt: add support for EnableMonitoring field

2025-09-17 08:54:08 +03:00

memorypolicy.go

libct: use CPUSetDynamic for affinity and mempolicy masks

2026-07-27 17:12:24 -07:00

mount_linux.go

validate: refuse readonly tmpfs and /dev without mount namespace

2026-09-29 16:48:12 -07:00

mount_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

mount.go

mount: add support for ridmap and idmap

2023-12-14 11:36:42 +11:00

namespaces_linux.go

libct/configs: use slices.Delete

2025-03-31 17:15:06 -07:00

namespaces_syscall_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

namespaces_syscall.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

namespaces_unsupported.go

remove pre-go1.17 build-tags

2024-06-29 15:45:25 +02:00

namespaces.go

Move libcontainer into subdirectory

2015-06-21 19:29:15 -07:00

netdevices.go

Add support for Linux Network Devices

2025-06-18 15:52:30 +01:00

network.go

Make state.json 25% smaller

2025-03-19 15:51:52 -07:00

tocpuset_test.go

libct: make MaxCPU exclusive

2026-09-01 14:00:38 -07:00