summaryrefslogtreecommitdiff
path: root/gnu
diff options
context:
space:
mode:
Diffstat (limited to 'gnu')
-rw-r--r--gnu/build/linux-container.scm11
1 files changed, 11 insertions, 0 deletions
diff --git a/gnu/build/linux-container.scm b/gnu/build/linux-container.scm
index 3e5158c2fd7..b6f8563f7d0 100644
--- a/gnu/build/linux-container.scm
+++ b/gnu/build/linux-container.scm
@@ -30,6 +30,7 @@
30 unprivileged-user-namespace-supported? 30 unprivileged-user-namespace-supported?
31 setgroups-supported? 31 setgroups-supported?
32 %namespaces 32 %namespaces
33 %writable-/tmp
33 run-container 34 run-container
34 call-with-container 35 call-with-container
35 container-excursion 36 container-excursion
@@ -387,6 +388,16 @@ if there are no child processes left."
387 (+ 128 (or (status:term-sig status) 388 (+ 128 (or (status:term-sig status)
388 (status:stop-sig status))))) 389 (status:stop-sig status)))))
389 390
391(define %writable-/tmp
392 ;; Writable and volatile /tmp.
393 (file-system
394 (device "none")
395 (mount-point "/tmp")
396 (type "tmpfs")
397 (flags '(no-suid no-dev))
398 (options "mode=755,size=10%")
399 (check? #f)))
400
390(define* (call-with-container mounts thunk #:key (namespaces %namespaces) 401(define* (call-with-container mounts thunk #:key (namespaces %namespaces)
391 (host-uids 1) (guest-uid 0) (guest-gid 0) 402 (host-uids 1) (guest-uid 0) (guest-gid 0)
392 (lock-mounts? #t) 403 (lock-mounts? #t)