gian/incus-mirror
1
0
Fork 0
mirror of https://github.com/lxc/incus synced 2026-08-02 05:26:46 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Merge pull request #3545 from Hye-Dev/main

Browse Source 
Fix typo in documented behavior in setting `restricted.containers.privilege` to `isolated`
This commit is contained in:
Stéphane Graber 2026-06-25 21:06:40 -04:00 committed by GitHub
commit ba0b00a9d6
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/incusd/api_project.go
View File

@ -1660,7 +1660,7 @@ func projectValidateConfig(s *state.State, config map[string]string) error {
// Possible values are `unprivileged`, `isolated`, and `allow`.
//
// - When set to `unprivileged`, this option prevents setting {config:option}`instance-security:security.privileged` to `true`.
// - When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `true`.
// - When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `false`.
// - When set to `allow`, there is no restriction.
// ---
// type: string

2
doc/config_options.txt
View File

@ -4722,7 +4722,7 @@ When set to `allow`, {config:option}`instance-security:security.nesting` can be
Possible values are `unprivileged`, `isolated`, and `allow`.
- When set to `unprivileged`, this option prevents setting {config:option}`instance-security:security.privileged` to `true`.
- When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `true`.
- When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `false`.
- When set to `allow`, there is no restriction.
```

2
internal/server/metadata/configuration.json
View File

@ -5307,7 +5307,7 @@
{
"restricted.containers.privilege": {
"defaultdesc": "`unprivileged`",
"longdesc": "Possible values are `unprivileged`, `isolated`, and `allow`.\n\n- When set to `unprivileged`, this option prevents setting {config:option}`instance-security:security.privileged` to `true`.\n- When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `true`.\n- When set to `allow`, there is no restriction.",
"longdesc": "Possible values are `unprivileged`, `isolated`, and `allow`.\n\n- When set to `unprivileged`, this option prevents setting {config:option}`instance-security:security.privileged` to `true`.\n- When set to `isolated`, this option prevents setting {config:option}`instance-security:security.privileged` and {config:option}`instance-security:security.idmap.isolated` to `false`.\n- When set to `allow`, there is no restriction.",
"shortdesc": "Which settings for privileged containers to prevent",
"type": "string"
}