Giuseppe Scrivano f172ff789b rootless: use nsfs file handles to persist namespaces ...

use name_to_handle_at and open_by_handle_at to persist rootless
namespaces without needing a pause process.

The namespace file handles are stored in a file and can be used to
rejoin the namespaces, as long as the namespaces still exist.

Fall back to the pause process approach only when the kernel doesn't
support nsfs handles (EOPNOTSUPP).

The feature is currently only enabled when the PODMAN_NO_PAUSE_PROCESS
environment variable is set.

These changes in the kernel are required (landed in Linux 6.18):

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3ab378cfa793

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

2026-01-20 18:41:59 +01:00

..

rootless_freebsd.c

pkg/rootless: Implement rootless.IsFdInherited on FreeBSD

2022-11-15 08:18:41 +00:00

rootless_freebsd.go

lint: reenable revive unused-parameter check

2025-10-01 10:42:08 -04:00

rootless_linux.c

rootless: use nsfs file handles to persist namespaces

2026-01-20 18:41:59 +01:00

rootless_linux.go

rootless: use nsfs file handles to persist namespaces

2026-01-20 18:41:59 +01:00

rootless_test.go

rootless: use nsfs file handles to persist namespaces

2026-01-20 18:41:59 +01:00

rootless_unsupported.go

lint: reenable revive unused-parameter check

2025-10-01 10:42:08 -04:00

rootless.go

rootless: use nsfs file handles to persist namespaces

2026-01-20 18:41:59 +01:00