| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 3 days | relicense as GPL-2+HEADmain | Helmut Grohne | |
| The earlier GPL-3 only is implied in the new grant. | |||
| 2025-07-12 | examples/unschroot_fs.py: lie about Location once for all sessions | Helmut Grohne | |
| 2025-07-12 | examples/unschroot_fs.py: support 0700 home | Helmut Grohne | |
| With the tar backend, there was a chdir(~/.cache/unschroot/...) that would fail if ~ was lacking execute permission for others. Now we chdir there before unsharing and then do relative operations to support that use case. | |||
| 2025-07-12 | examples/unschroot_fs.py: tar chroot sessions must emit a Location | Helmut Grohne | |
| 2025-07-12 | examples/unschroot_fs.py: Some base tar lack /dev | Helmut Grohne | |
| 2025-07-11 | prefer getpass.getuser() over os.getlogin() | Helmut Grohne | |
| os.getlogin() returns an undesired value in a runuser environment and is not overridable with environment. | |||
| 2025-07-02 | unschroot_proc: support additional mounts | Helmut Grohne | |
| By using bindfs, we may perform id-mapped bind mounts to share e.g. a user-owned ccache with sbuild. | |||
| 2025-07-02 | fix unschroot_proc.py to work from the examples directory | Helmut Grohne | |
| 2025-07-01 | add a second implementation of the unschroot example | Helmut Grohne | |
| While the first implementation created new namespaces for every invocation in a similar way to sbuild's unshare mode, the second implementation keeps a backround process with persistent user and mount namespace around. This allows using a new tmpfs as backing device and using fuse mounts for underlying filesystems. Communication between the background process and the cli is implemented using the https://github.com/helmutg/asyncvarlink varlink implementation. Chroots can be detected from typical locations or configured via ~/.config/unschroot.ini. Thanks go out for fruitful discussions, feedback and testing to: * Christian Hofstaedler * Christoph Berg * Enrico Zini * Jochen Sprickerhof * Johannes Schauer Marin Rodrigues * Thomas Walz | |||
| 2025-06-28 | change/improve populate_dev API | Helmut Grohne | |
| populate_dev may be used before unsharing a pid namespace with the intention of unsharing it. Then, /dev/pts should not be mounted and instead that mount needs to happen inside the newly created pid namespace. To allow for this usage, rename the pidns argument to pts and turn it into a literal. It may also be desired to have a /dev without pts, so add that option as well. It's a breaking change, but it does add clarity. | |||
| 2025-06-27 | mount syscall now accepts options as dict | Helmut Grohne | |
| 2025-06-26 | Allow customizing ZstdTarFile compression concurrency | Helmut Grohne | |
| Also turn the compressor-specific arguments into keyword-only arguments. | |||
| 2025-06-26 | mark "fd" as a good name for pylint | Helmut Grohne | |
| 2025-06-26 | Document ZstdTarFile.zstopen | Helmut Grohne | |
| 2025-06-26 | Allow specifying a compresslevel to ZstdTarFile.zstopen | Helmut Grohne | |
| 2025-06-26 | simplify or-ed isinstance invocations | Helmut Grohne | |
| Suggested-by: pylint | |||
| 2025-06-26 | log unhandled exceptions from run_in_fork | Helmut Grohne | |
| 2025-06-26 | handle SystemExit in run_in_fork reasonably | Helmut Grohne | |
| 2025-06-22 | async_run_in_fork: explicitly give up on the event loop | Helmut Grohne | |
| The forked process still shares file descriptors with its parent running asyncio code. Having two processes deal with the same epoll fd or similar would be really bad. Hence release the event loop in the child to prevent accidental use. | |||
| 2025-06-22 | linuxnamespaces.syscalls: mark the logger object as private | Helmut Grohne | |
| 2025-06-12 | run_in_fork: allow starting the function immediately | Helmut Grohne | |
| Doing so skips creating the EventFD. | |||
| 2025-06-12 | run_in_fork should never propagate exceptions from the child | Helmut Grohne | |
| Otherwise an exception handler in the caller may be invoked in unexpected ways. If an exception occurs, exit non-zero and reraise in the parent with less detail. | |||
| 2025-06-12 | dbussy.SystemdJobWaiter: drop references to removed jobs as soon as we can | Helmut Grohne | |
| 2025-06-03 | drop redundant OPEN_TREE_ prefix from some OpenTreeFlags | Helmut Grohne | |
| 2025-06-03 | add wrapper for PR_SET_DUMPABLE prctl | Helmut Grohne | |
| 2025-06-03 | add method MountFlags.tonames | Helmut Grohne | |
| It provides part of the functionality of MountFlags.tostr. | |||
| 2025-06-01 | idmapping functions accept a further proc arguement | Helmut Grohne | |
| This allows opening /proc as an O_PATH descriptor, then locking a process up and then still writing idmaps by accessing the now inaccessible /proc via the retained file descriptor. | |||
| 2025-06-01 | New methods AtLocation.write_{bytes,text} | Helmut Grohne | |
| They bring similarity to their pathlib.Path counterparts. | |||
| 2025-05-24 | SignalFD.areaditer: support iterative reading | Helmut Grohne | |
| 2025-05-24 | split idmapping things to new module idmap | Helmut Grohne | |
| 2025-05-23 | align HasFileno protocol with asyncvarlink | Helmut Grohne | |
| 2025-05-21 | extend .gitignore for more tool-generated files | Helmut Grohne | |
| 2025-05-21 | agree a bit with black's formatting recommendations | Helmut Grohne | |
| 2025-05-21 | test_atlocation.py: mypy/1.15 now understands those literals | Helmut Grohne | |
| 2025-05-21 | relax type of async_copyfd regarding FileDescriptors | Helmut Grohne | |
| Fixes: 30a111639ce6 ("expand use of FileDescriptor and add FileDescriptorLike type alias") | |||
| 2025-05-21 | fix return type of FileDescriptor.fileno | Helmut Grohne | |
| Fixes: 30a111639ce6 ("expand use of FileDescriptor and add FileDescriptorLike type alias") | |||
| 2025-05-21 | fix type checking on mypy/1.15 | Helmut Grohne | |
| 2025-05-21 | choose flit as build backend | Helmut Grohne | |
| It's a pure Python module and flit seems to just work for those. | |||
| 2025-05-21 | expand use of FileDescriptor and add FileDescriptorLike type alias | Helmut Grohne | |
| When accepting file descriptors, non-int objects with a fileno method are now generally accepted. When returning a file descriptor, a FileDescriptor instance is now returned. | |||
| 2025-05-20 | AtLocation.chdir: FileDescriptor already is a context manager | Helmut Grohne | |
| 2025-05-20 | fix AtLocation.chdir for the mixed case | Helmut Grohne | |
| When both fd and location are given, it would previously ignore the fd component. To properly implement that, we must open and fchdir. | |||
| 2025-05-20 | syscalls.py: help old mypy in better understanding sigval | Helmut Grohne | |
| 2025-05-20 | syscalls.py: simplify MountFlags implementation | Helmut Grohne | |
| The "mustnegate" field was a bit strange and it was only ever set in the default value used for the lookup. Remove it and express its semantics in code instead. | |||
| 2025-05-06 | FileDescriptor: add convenience wrapper for pidfd_open | Helmut Grohne | |
| 2025-05-04 | implement signalfd(2) and sigqueue(2) system calls | Helmut Grohne | |
| 2025-05-04 | examples/withallsubuids.py: expand comparison to unshare(1) | Helmut Grohne | |
| 2025-05-02 | examples/unschroot.py: actually support using aliases | Helmut Grohne | |
| Fixes: 426f547d5b54 ("examples/unschroot.py: support overlayfs-based directory chroots") Reported-by: Christoph Berg <myon@debian.org> | |||
| 2025-05-01 | examples/unschroot.py: fix sbuild compatibility | Helmut Grohne | |
| The parent commit regressed working with "chroot:" prefixed chroots. Directory chroots are required to emit a "Mount Location" to be considered valid by sbuild. | |||
| 2025-05-01 | examples/unschroot.py: support overlayfs-based directory chroots | Helmut Grohne | |
| Suggested-by: Christoph Berg <myon@debian.org> | |||
| 2025-04-30 | systemd.dbussy: call StartTransientUnit asynchronously | Helmut Grohne | |
| Fixes: b0874c6086f1 ("lift the dbus functionality from the cgroup example") Fixes: bb83f3fe1bec ("add examples/cgroup.py: writeable cgroup hierarchy") | |||
 |
index : ~helmut/python-linuxnamespaces.git | |
| Python module for working with Linux namespaces | Helmut Grohne |
| summaryrefslogtreecommitdiff |