mirror of
https://github.com/moby/moby.git
synced 2026-08-10 01:49:04 +00:00
User namespace remapping rejects privileged containers and host network or PID modes, disables containerd snapshotters, and leaves ping_group_range unchanged in private user namespaces. Tests that assume rootful daemon behavior therefore fail in userns integration mode. Skip only the incompatible cases while retaining compatible subtests and the ip_unprivileged_port_start assertion. Make the NRI writable bind fixture independent of host and remapped UID ownership by restoring its write bits after applying the process umask. Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>