4ed5e25074
This allows ZFS datasets to be delegated to a user/mount namespace Within that namespace, only the delegated datasets are visible Works very similarly to Zones/Jailes on other ZFS OSes As a user: ``` $ unshare -Um $ zfs list no datasets available $ echo $$ 1234 ``` As root: ``` # zfs list NAME ZONED MOUNTPOINT containers off /containers containers/host off /containers/host containers/host/child off /containers/host/child containers/host/child/gchild off /containers/host/child/gchild containers/unpriv on /unpriv containers/unpriv/child on /unpriv/child containers/unpriv/child/gchild on /unpriv/child/gchild # zfs zone /proc/1234/ns/user containers/unpriv ``` Back to the user namespace: ``` $ zfs list NAME USED AVAIL REFER MOUNTPOINT containers 129M 47.8G 24K /containers containers/unpriv 128M 47.8G 24K /unpriv containers/unpriv/child 128M 47.8G 128M /unpriv/child ``` Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Signed-off-by: Will Andrews <will.andrews@klarasystems.com> Signed-off-by: Allan Jude <allan@klarasystems.com> Signed-off-by: Mateusz Piotrowski <mateusz.piotrowski@klarasystems.com> Co-authored-by: Allan Jude <allan@klarasystems.com> Co-authored-by: Mateusz Piotrowski <mateusz.piotrowski@klarasystems.com> Sponsored-by: Buddy <https://buddy.works> Closes #12263
24 lines
586 B
Plaintext
24 lines
586 B
Plaintext
dnl #
|
|
dnl # 3.18 API change
|
|
dnl # struct user_namespace inum moved from .proc_inum to .ns.inum.
|
|
dnl #
|
|
AC_DEFUN([ZFS_AC_KERNEL_SRC_USER_NS_COMMON_INUM], [
|
|
ZFS_LINUX_TEST_SRC([user_ns_common_inum], [
|
|
#include <linux/user_namespace.h>
|
|
], [
|
|
struct user_namespace uns;
|
|
uns.ns.inum = 0;
|
|
])
|
|
])
|
|
|
|
AC_DEFUN([ZFS_AC_KERNEL_USER_NS_COMMON_INUM], [
|
|
AC_MSG_CHECKING([whether user_namespace->ns.inum exists])
|
|
ZFS_LINUX_TEST_RESULT([user_ns_common_inum], [
|
|
AC_MSG_RESULT(yes)
|
|
AC_DEFINE(HAVE_USER_NS_COMMON_INUM, 1,
|
|
[user_namespace->ns.inum exists])
|
|
],[
|
|
AC_MSG_RESULT(no)
|
|
])
|
|
])
|