Skip to content

Fix outbound socket relays for container mounts - #841

Open
EhsanAzish80 wants to merge 1 commit into
apple:mainfrom
EhsanAzish80:fix/2101-publish-socket-tmpfs
Open

Fix outbound socket relays for container mounts#841
EhsanAzish80 wants to merge 1 commit into
apple:mainfrom
EhsanAzish80:fix/2101-publish-socket-tmpfs

Conversation

@EhsanAzish80

Copy link
Copy Markdown

Summary

  • start outbound Unix socket relays after the container process creates its mount namespace
  • resolve guest socket paths through /proc/<pid>/root so tmpfs and bind-mounted targets are visible
  • preserve pre-start staging for inbound socket relays

Fixes apple/container#2101.

Testing

  • swift test --filter LinuxContainerTests (6 tests passed)
  • swift format lint --strict --configuration .swift-format-nolint Sources/Containerization/LinuxContainer.swift Tests/ContainerizationTests/LinuxContainerTests.swift

I could not complete an end-to-end runtime check because the current apple/container CLI built with Xcode 27 routed commands to root help before system startup. The focused namespace-path regression and LinuxContainer suite pass.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: publish-socket cannot relay a socket on tmpfs with read-only root

1 participant