summaryrefslogtreecommitdiff
path: root/libpod/runtime_ctr.go
diff options
context:
space:
mode:
authorGiuseppe Scrivano <gscrivan@redhat.com>2019-03-15 22:50:15 +0100
committerGiuseppe Scrivano <gscrivan@redhat.com>2019-03-15 22:53:23 +0100
commit6c6a8654363457a9638d58265d0a7e8743575d7a (patch)
treec217b1e1b34acd7c1575504008a25b70c7cd2101 /libpod/runtime_ctr.go
parent8aed32acea9bb35898abcee58fc9aa2a03ef264a (diff)
downloadpodman-6c6a8654363457a9638d58265d0a7e8743575d7a.tar.gz
podman-6c6a8654363457a9638d58265d0a7e8743575d7a.tar.bz2
podman-6c6a8654363457a9638d58265d0a7e8743575d7a.zip
rootless: change default path for conmon.pid
We cannot use the RunDir for writing the conmon.pid file as we might not be able to read it before we join a namespace, since it is owned by the root in the container which can be a different uid when using uidmap. To avoid completely the issue, we will just write it to the static dir which is always readable by the unprivileged user. Closes: https://github.com/containers/libpod/issues/2673 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Diffstat (limited to 'libpod/runtime_ctr.go')
-rw-r--r--libpod/runtime_ctr.go2
1 files changed, 1 insertions, 1 deletions
diff --git a/libpod/runtime_ctr.go b/libpod/runtime_ctr.go
index c6f119913..3b74a65dd 100644
--- a/libpod/runtime_ctr.go
+++ b/libpod/runtime_ctr.go
@@ -171,7 +171,7 @@ func (r *Runtime) newContainer(ctx context.Context, rSpec *spec.Spec, options ..
}()
if rootless.IsRootless() && ctr.config.ConmonPidFile == "" {
- ctr.config.ConmonPidFile = filepath.Join(ctr.state.RunDir, "conmon.pid")
+ ctr.config.ConmonPidFile = filepath.Join(ctr.config.StaticDir, "conmon.pid")
}
// Go through the volume mounts and check for named volumes