Lennart Poettering
fa8b70f2c8
userdb: define new 64K "foreign UID" range ( #35932 )
...
This is establish the basic concepts for #35685 , in the hope to get this
merged first.
This defines a special, fixed 64K UID range that is supposed to be used
by directory container images on disk, that is mapped to a dynamic UID
range at runtime (via idmapped mounts).
This enables a world where each container can run with a dynamic UID
range, but this in no way leaks onto the disk, thus making supposedly
dynamic, transient UID range assignments persistent.
This is infrastructure later used for the primary part of #35685 : unpriv
container execution with directory images inside user's home dirs, that
are assigned to this special "foreign UID range".
This PR only defines the ranges, synthesizes NSS records for them via
userdb, and then exposes them in a new "systemd-dissect --shift" command
that can re-chown a container directory tree into this range (and in
fact any range).
This comes with docs. But no tests. There are tests in #35685 that cover
all this, but they are more comprehensive and also test nspawn's hook-up
with this, hence are excluded from this PR.
2025-01-10 13:49:11 +01:00
..
2025-01-07 20:31:15 +09:00
2021-10-01 17:27:34 +01:00
2022-10-26 08:39:34 +02:00
2024-12-25 17:00:31 +01:00
2024-06-06 12:07:08 +02:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-10-29 16:50:06 +01:00
2024-11-05 22:57:51 +01:00
2023-12-25 09:15:53 +01:00
2022-10-26 08:39:34 +02:00
2022-10-26 08:39:34 +02:00
2022-10-26 08:39:34 +02:00
2024-04-22 15:16:54 +02:00
2024-10-30 12:38:27 +00:00
2024-12-11 11:14:37 +09:00
2024-12-25 17:24:38 +01:00
2024-11-07 16:55:53 +01:00
2024-04-14 23:41:34 +08:00
2020-11-09 13:23:58 +09:00
2024-11-26 12:26:10 +01:00
2024-12-25 17:00:31 +01:00
2024-06-06 12:07:08 +02:00
2024-11-24 01:11:42 +09:00
2024-04-04 02:30:29 +09:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2022-10-26 08:39:34 +02:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-08-21 15:17:02 +02:00
2023-03-29 02:08:18 +01:00
2024-04-04 02:30:29 +09:00
2024-11-05 22:57:51 +01:00
2022-10-26 08:39:34 +02:00
2024-11-26 17:28:14 +01:00
2022-10-26 08:39:34 +02:00
2024-10-01 11:16:14 +02:00
2023-12-25 15:51:47 +01:00
2024-04-03 17:58:35 +09:00
2024-04-03 17:58:35 +09:00
2024-04-04 02:30:29 +09:00
2024-04-03 17:58:35 +09:00
2024-04-03 17:58:35 +09:00
2024-06-06 12:07:08 +02:00
2024-04-04 02:30:29 +09:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2023-12-24 09:23:53 +01:00
2024-11-11 20:31:08 +01:00
2023-12-25 15:51:47 +01:00
2024-11-08 14:14:36 +01:00
2023-12-25 15:51:47 +01:00
2024-08-21 15:17:02 +02:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2024-08-21 15:17:02 +02:00
2024-12-25 17:00:31 +01:00
2024-07-13 18:00:16 +02:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2021-10-01 17:27:34 +01:00
2024-04-04 03:23:20 +09:00
2024-06-06 12:07:08 +02:00
2024-12-25 17:24:38 +01:00
2024-12-30 10:27:39 +09:00
2024-08-22 04:26:32 +09:00
2024-04-23 17:03:01 +02:00
2024-10-15 09:25:13 +02:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2024-10-16 20:12:38 -07:00
2024-12-25 17:00:31 +01:00
2024-11-11 20:31:08 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:00:31 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:24:38 +01:00
2025-01-08 15:27:25 +01:00
2024-12-25 17:00:31 +01:00
2024-11-08 14:14:36 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-11-26 17:28:14 +01:00
2025-01-09 14:08:06 +01:00
2024-04-03 17:58:39 +09:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-04-03 17:58:35 +09:00
2024-04-03 17:58:35 +09:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-12-11 18:32:46 +01:00
2024-12-25 17:24:38 +01:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-11-11 20:31:08 +01:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-03 17:58:39 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-04-18 09:45:51 +09:00
2024-10-01 15:55:28 +02:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-08 14:14:36 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-08 14:14:36 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-04-18 09:45:51 +09:00
2024-09-06 14:10:12 +02:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-05 19:32:19 +00:00
2024-09-12 16:18:07 +02:00
2024-12-25 17:00:31 +01:00
2024-11-11 20:31:08 +01:00
2024-11-11 20:31:08 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-05-08 17:14:32 +02:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-11-07 18:51:21 +09:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-05 19:32:19 +00:00
2023-12-25 15:51:47 +01:00
2024-10-10 19:02:53 +09:00
2024-10-10 19:02:53 +09:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-10-10 19:02:53 +09:00
2023-12-25 15:51:47 +01:00
2024-10-10 19:02:53 +09:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-08 14:14:36 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2024-04-20 12:10:42 +02:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-04-17 22:01:53 +02:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-04-17 22:01:53 +02:00
2024-03-14 14:25:52 +08:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-11-05 22:57:51 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-02-14 14:58:37 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-04-04 03:23:20 +09:00
2022-10-26 08:39:34 +02:00
2023-12-25 15:51:47 +01:00
2024-11-05 22:57:51 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2024-04-14 23:46:54 +08:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2024-11-06 19:06:47 +09:00
2022-10-26 08:39:34 +02:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2023-12-24 09:23:53 +01:00
2023-12-24 10:46:55 +01:00
2024-12-25 17:00:31 +01:00
2023-12-26 08:59:53 +01:00
2023-12-26 08:59:53 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-11-07 18:51:21 +09:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-09-11 15:00:34 +02:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-11-24 01:11:42 +09:00
2025-01-02 14:59:00 +01:00
2023-12-26 13:10:36 +01:00
2024-08-02 16:55:03 +01:00
2025-01-08 21:54:19 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-03 19:36:41 +01:00
2024-03-10 16:13:19 +00:00
2024-04-03 22:07:43 +08:00
2024-02-19 11:18:11 +00:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2024-11-08 14:14:36 +01:00
2024-12-25 17:24:38 +01:00
2024-11-05 22:57:51 +01:00
2024-09-13 12:32:42 +02:00
2024-11-05 22:57:51 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-03-06 09:55:01 +00:00
2024-12-25 17:24:38 +01:00
2024-03-06 09:55:01 +00:00
2024-12-25 17:24:38 +01:00
2024-11-12 17:54:07 +09:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2023-12-25 15:51:47 +01:00
2024-05-25 02:13:00 +09:00
2024-11-24 01:11:42 +09:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:00:31 +01:00
2024-04-15 10:40:11 +02:00
2024-11-05 22:57:51 +01:00
2024-04-15 10:40:11 +02:00
2024-12-25 17:24:38 +01:00
2024-11-05 22:57:51 +01:00
2024-11-05 22:57:51 +01:00
2024-07-28 10:33:49 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-05 22:57:51 +01:00
2024-11-24 01:11:42 +09:00
2024-11-05 22:57:51 +01:00
2025-01-03 21:14:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-11 20:31:08 +01:00
2024-05-17 15:16:07 +02:00
2024-05-28 14:48:56 +02:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-26 17:28:14 +01:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-04-15 10:40:11 +02:00
2024-04-22 15:16:54 +02:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-05-28 14:48:53 +02:00
2024-01-11 12:19:44 +00:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2024-10-18 17:58:47 -04:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:00:31 +01:00
2024-05-28 14:46:44 +02:00
2023-12-25 15:51:47 +01:00
2024-11-05 22:57:51 +01:00
2024-06-15 16:58:11 +02:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2025-01-07 20:31:15 +09:00
2024-02-28 15:33:51 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-01-11 12:19:44 +00:00
2024-10-24 10:07:28 +02:00
2024-10-24 09:54:48 +02:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:24:38 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-03-18 13:16:48 +00:00
2024-06-11 18:02:31 +01:00
2024-12-29 14:38:00 +09:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-06-20 00:10:12 +09:00
2023-12-25 15:51:47 +01:00
2025-01-09 03:49:29 +09:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-30 10:27:39 +09:00
2024-08-22 22:20:42 +02:00
2024-12-25 17:00:31 +01:00
2024-11-05 22:57:51 +01:00
2024-11-11 20:31:08 +01:00
2024-06-06 12:07:08 +02:00
2024-12-25 17:24:38 +01:00
2024-05-28 14:46:44 +02:00
2024-12-25 17:00:31 +01:00
2024-05-28 14:46:44 +02:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-05-03 11:36:56 +02:00
2024-11-05 22:57:51 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:00:31 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:24:38 +01:00
2024-11-24 01:11:42 +09:00
2024-12-25 17:24:38 +01:00
2024-12-19 12:39:32 +01:00
2024-10-29 11:00:13 +01:00
2023-12-24 09:32:26 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-08-21 15:17:02 +02:00
2024-11-11 20:31:08 +01:00
2024-12-25 17:24:38 +01:00
2024-12-25 17:00:31 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2023-12-25 15:51:47 +01:00
2024-11-06 19:06:40 +09:00
2024-06-06 12:07:08 +02:00
2024-12-25 17:00:31 +01:00
2025-01-07 20:31:15 +09:00
2024-12-30 09:14:29 +09:00
2025-01-05 09:40:05 +05:30
2024-12-30 09:14:29 +09:00
2024-10-04 12:45:21 +01:00
2024-10-31 21:08:08 +00:00
2024-05-28 16:30:54 +02:00
2024-12-25 17:00:31 +01:00
2025-01-08 21:41:03 +01:00
2024-12-25 17:24:39 +01:00
2023-12-25 15:51:47 +01:00
2024-12-25 17:00:31 +01:00
2024-11-18 15:18:26 +09:00
2024-02-17 11:20:00 +00:00
2024-04-04 02:30:29 +09:00
2022-06-28 13:10:05 +02:00
2024-12-25 17:00:31 +01:00