Permalink
Browse files

turn on shared mount namespace propagation by default

Signed-off-by: Huamin Chen <hchen@redhat.com>
  • Loading branch information...
rootfs committed Mar 21, 2016
1 parent b477042 commit 867f8bcb7dbf6ab0c160b27891cdd9e9f80c36b0
Showing with 6 additions and 0 deletions.
  1. +6 −0 pkg/kubelet/dockertools/manager.go
@@ -439,6 +439,12 @@ func makeMountBindings(mounts []kubecontainer.Mount, podHasSELinuxLabel bool) (r
}

}
//FIXME: hack to turn on shared mount namespace propagation
if !m.ReadOnly && !(m.SELinuxRelabel && podHasSELinuxLabel) {
bind += ":rshared"
} else {
bind += ",rshared"
}
result = append(result, bind)
}
return

0 comments on commit 867f8bc

Please sign in to comment.