diff options
author | Paul Holzinger <pholzing@redhat.com> | 2021-12-01 18:55:08 +0100 |
---|---|---|
committer | Paul Holzinger <pholzing@redhat.com> | 2021-12-01 19:19:44 +0100 |
commit | 3ff47748dea946775b8f4ec8e1c644c2efb3950b (patch) | |
tree | b332a07a1495152c97b589ea17cff35b53d5dc81 /contrib/msi | |
parent | 295a6f7dd086731448a1168a349f62d3035258ca (diff) | |
download | podman-3ff47748dea946775b8f4ec8e1c644c2efb3950b.tar.gz podman-3ff47748dea946775b8f4ec8e1c644c2efb3950b.tar.bz2 podman-3ff47748dea946775b8f4ec8e1c644c2efb3950b.zip |
Fix possible rootless netns cleanup race
rootlessNetNS.Cleanup() has an issue with how it detects if cleanup
is needed, reading the container state is not good ebough because
containers are first stopped and than cleanup will be called. So at one
time two containers could wait for cleanup but the second one will fail
because the first one triggered already the cleanup thus making rootless
netns unavailable for the second container resulting in an teardown
error. Instead of checking the container state we need to check the
netns state.
Secondly, podman unshare --rootless-netns should not do the cleanup.
This causes more issues than it is worth fixing. Users also might want
to use this to setup the namespace in a special way. If unshare also
cleans this up right away we cannot do this.
[NO NEW TESTS NEEDED]
Fixes #12459
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
Diffstat (limited to 'contrib/msi')
0 files changed, 0 insertions, 0 deletions