cmd/incusd: isolated on restricted.containers.privilege prevents setting security.idmap.isolated to false

Signed-off-by: Joseph Maldjian <joseph.maldjian@hyecompany.com>
This commit is contained in:
Joseph Maldjian 2026-06-25 18:03:02 -05:00
parent 39fc84139d
commit a9dbaefeaa

View File

@ -1660,7 +1660,7 @@ func projectValidateConfig(s *state.State, config map[string]string) error {
// Possible values are `unprivileged`, `isolated`, and `allow`.
//
// - When set to `unprivileged`, this option prevents setting {config:option}`instance-security:security.privileged` to `true`.
// - When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `true`.
// - When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `false`.
// - When set to `allow`, there is no restriction.
// ---
// type: string