mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
Fix btrfs subvolume snapshot dir perms for user namespaces
Make sure btrfs mounted subvolumes are owned properly when a remapped root exists (user namespaces are enabled, for example) Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com> (github: estesp)
This commit is contained in:
parent
611d5e4eeb
commit
72e65e8793
1 changed files with 8 additions and 0 deletions
|
@ -266,6 +266,14 @@ func (d *Driver) Create(id, parent, mountLabel string) error {
|
|||
}
|
||||
}
|
||||
|
||||
// if we have a remapped root (user namespaces enabled), change the created snapshot
|
||||
// dir ownership to match
|
||||
if rootUID != 0 || rootGID != 0 {
|
||||
if err := os.Chown(path.Join(subvolumes, id), rootUID, rootGID); err != nil {
|
||||
return err
|
||||
}
|
||||
}
|
||||
|
||||
return label.Relabel(path.Join(subvolumes, id), mountLabel, false)
|
||||
}
|
||||
|
||||
|
|
Loading…
Add table
Reference in a new issue