mirror of
https://github.com/lxc/incus
synced 2026-08-02 05:26:46 +00:00
23 lines
451 B
Go
23 lines
451 B
Go
//go:build linux && cgo
|
|
|
|
package subprocess
|
|
|
|
import (
|
|
"syscall"
|
|
|
|
"github.com/lxc/lxd/shared/idmap"
|
|
)
|
|
|
|
// SetUserns allows running inside of a user namespace.
|
|
func (p *Process) SetUserns(userns *idmap.IdmapSet) {
|
|
p.SysProcAttr = &syscall.SysProcAttr{
|
|
Cloneflags: syscall.CLONE_NEWUSER,
|
|
Credential: &syscall.Credential{
|
|
Uid: uint32(0),
|
|
Gid: uint32(0),
|
|
},
|
|
UidMappings: userns.ToUidMappings(),
|
|
GidMappings: userns.ToGidMappings(),
|
|
}
|
|
}
|
