From 928c4a94de0302634c66d8a559fc6ac26d21e5af Mon Sep 17 00:00:00 2001 From: Helmut Grohne Date: Sat, 22 Jun 2024 22:56:53 +0200 Subject: populate_sys: allow device access The systemd test suite does not like having no access to /sys/dev and other trees related to devices. Optionally provide them. Properly virtualizing them likely requires lxcfs or similar. --- examples/cgroup.py | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) (limited to 'examples/cgroup.py') diff --git a/examples/cgroup.py b/examples/cgroup.py index 5fa5df6..219dc62 100755 --- a/examples/cgroup.py +++ b/examples/cgroup.py @@ -50,14 +50,17 @@ def main() -> None: linuxnamespaces.systemd.reexec_as_transient_unit( properties={"Delegate": True} ) + namespaces = ( + linuxnamespaces.CloneFlags.NEWUSER + | linuxnamespaces.CloneFlags.NEWNS + | linuxnamespaces.CloneFlags.NEWCGROUP + ) linuxnamespaces.unshare_user_idmap( [linuxnamespaces.IDMapping(os.getuid(), os.getuid(), 1)], [linuxnamespaces.IDMapping(os.getgid(), os.getgid(), 1)], - linuxnamespaces.CloneFlags.NEWUSER - | linuxnamespaces.CloneFlags.NEWNS - | linuxnamespaces.CloneFlags.NEWCGROUP, + namespaces, ) - linuxnamespaces.populate_sys("/", "/", mycgroup) + linuxnamespaces.populate_sys("/", "/", namespaces, mycgroup) os.execlp(os.environ["SHELL"], os.environ["SHELL"]) -- cgit v1.2.3