ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Align network verifiers with runtime namespace sources

Browse source
This commit is contained in:
ms2k 2026-07-17 17:24:45 +09:00
commit 1867f65d4e
1 changed files with 12 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
crates/lazaret-runtime-supervisor/src/network.rs
View file

@ -214,8 +214,12 @@ where
}
#[allow(deprecated)]
pub(crate) fn enter_generation_filesystem_namespaces()
-> io::Result<(NamespaceIdentity, NamespaceIdentity)> {
/// Enters the generation user and mount namespaces before network preparation.
///
/// # Errors
/// Returns an error when namespace creation, ID mapping, or mount isolation fails.
pub fn enter_generation_filesystem_namespaces() -> io::Result<(NamespaceIdentity, NamespaceIdentity)>
{
let uid = getuid().as_raw();
let gid = getgid().as_raw();
rustix::thread::unshare(UnshareFlags::NEWUSER)?;