diff options
| author | flouthoc <flouthoc.git@gmail.com> | 2021-08-12 18:48:39 +0530 |
|---|---|---|
| committer | flouthoc <flouthoc.git@gmail.com> | 2021-08-17 16:18:54 +0530 |
| commit | e7ee15f8c39122e0d2b343ce9a3c0b577af45f40 (patch) | |
| tree | 17211b2df3e4306ea962697607a727486626363b /libpod/runtime.go | |
| parent | 8c228bdbd031e5930e6319e8fe25b3ff340919f3 (diff) | |
| download | podman-e7ee15f8c39122e0d2b343ce9a3c0b577af45f40.tar.gz podman-e7ee15f8c39122e0d2b343ce9a3c0b577af45f40.tar.bz2 podman-e7ee15f8c39122e0d2b343ce9a3c0b577af45f40.zip | |
cgroup-manager-systemd:Fail early if user:rootless and relevent session is not present.
[NO TESTS NEEDED]
Signed-off-by: flouthoc <flouthoc.git@gmail.com>
Diffstat (limited to 'libpod/runtime.go')
| -rw-r--r-- | libpod/runtime.go | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/libpod/runtime.go b/libpod/runtime.go index 30659a3d4..1f403790f 100644 --- a/libpod/runtime.go +++ b/libpod/runtime.go @@ -30,6 +30,7 @@ import ( "github.com/containers/podman/v3/libpod/shutdown" "github.com/containers/podman/v3/pkg/cgroups" "github.com/containers/podman/v3/pkg/rootless" + "github.com/containers/podman/v3/pkg/systemd" "github.com/containers/podman/v3/pkg/util" "github.com/containers/storage" "github.com/containers/storage/pkg/unshare" @@ -500,6 +501,15 @@ func makeRuntime(ctx context.Context, runtime *Runtime) (retErr error) { // no containers running. Create immediately a namespace, as // we will need to access the storage. if needsUserns { + // warn users if mode is rootless and cgroup manager is systemd + // and no valid systemd session is present + // warn only whenever new namespace is created + if runtime.config.Engine.CgroupManager == config.SystemdCgroupsManager { + unified, _ := cgroups.IsCgroup2UnifiedMode() + if unified && rootless.IsRootless() && !systemd.IsSystemdSessionValid(rootless.GetRootlessUID()) { + logrus.Debug("Invalid systemd user session for current user") + } + } aliveLock.Unlock() // Unlock to avoid deadlock as BecomeRootInUserNS will reexec. pausePid, err := util.GetRootlessPauseProcessPidPathGivenDir(runtime.config.Engine.TmpDir) if err != nil { |