mirror of
https://github.com/systemd/systemd.git
synced 2026-07-26 11:20:26 +00:00
3363693935
We expose this via --private-users-delegate= which takes the number of ranges to delegate. On top of delegating the ranges, we also mount in the nsresourced socket and the mountfsd socket so that nested containers can use nsresourced to allocate from the delegated ranges and mountfsd to mount images. Finally, we also create /run/systemd/dissect-root with systemd-tmpfiles to make sure it is always available as unpriv users won't be able to create it themselves.
26 lines
780 B
SYSTEMD
26 lines
780 B
SYSTEMD
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
#
|
|
# This file is part of systemd.
|
|
#
|
|
# systemd is free software; you can redistribute it and/or modify it
|
|
# under the terms of the GNU Lesser General Public License as published by
|
|
# the Free Software Foundation; either version 2.1 of the License, or
|
|
# (at your option) any later version.
|
|
|
|
[Unit]
|
|
Description=DDI File System Mounter Socket
|
|
Documentation=man:systemd-mountfsd.service(8)
|
|
DefaultDependencies=no
|
|
Conflicts=shutdown.target
|
|
Before=sockets.target shutdown.target
|
|
ConditionPathExists=!/run/host/io.systemd.MountFileSystem
|
|
|
|
[Socket]
|
|
ListenStream=/run/systemd/io.systemd.MountFileSystem
|
|
Symlinks=/run/varlink/registry/io.systemd.MountFileSystem
|
|
FileDescriptorName=varlink
|
|
SocketMode=0666
|
|
|
|
[Install]
|
|
WantedBy=sockets.target
|