Files
nomad/command
Danielle Lancashire afb59bedf5 volumes: Add support for mount propagation
This commit introduces support for configuring mount propagation when
mounting volumes with the `volume_mount` stanza on Linux targets.

Similar to Kubernetes, we expose 3 options for configuring mount
propagation:

- private, which is equivalent to `rprivate` on Linux, which does not allow the
           container to see any new nested mounts after the chroot was created.

- host-to-task, which is equivalent to `rslave` on Linux, which allows new mounts
                that have been created _outside of the container_ to be visible
                inside the container after the chroot is created.

- bidirectional, which is equivalent to `rshared` on Linux, which allows both
                 the container to see new mounts created on the host, but
                 importantly _allows the container to create mounts that are
                 visible in other containers an don the host_

private and host-to-task are safe, but bidirectional mounts can be
dangerous, as if the code inside a container creates a mount, and does
not clean it up before tearing down the container, it can cause bad
things to happen inside the kernel.

To add a layer of safety here, we require that the user has ReadWrite
permissions on the volume before allowing bidirectional mounts, as a
defense in depth / validation case, although creating mounts should also require
a priviliged execution environment inside the container.
2019-10-14 14:09:58 +02:00
..
2018-03-11 17:43:19 +00:00
2018-05-11 18:05:43 -04:00
2019-05-16 17:06:03 -04:00
2019-05-12 22:04:50 -04:00
2019-04-23 12:50:23 +02:00
2017-07-20 21:24:21 -07:00
2017-07-20 21:24:21 -07:00
2017-07-07 12:07:07 -07:00
CLI
2018-05-07 14:50:01 -05:00
2018-04-03 18:15:12 -07:00
2018-05-21 18:00:14 -05:00
2018-08-14 14:06:04 -04:00
2018-11-08 09:48:43 -06:00
2018-11-08 09:48:43 -06:00
2018-04-26 15:46:22 -07:00
2017-09-15 23:33:43 +00:00
2018-03-21 20:27:32 -07:00
2018-03-11 19:06:15 +00:00
2019-09-09 10:04:41 -07:00
2019-05-13 10:01:19 -04:00
2019-01-08 09:35:16 -08:00
2018-06-14 15:48:01 +02:00
2018-03-21 20:27:32 -07:00
2017-07-20 21:24:21 -07:00
2017-07-20 21:24:21 -07:00
2017-07-20 21:24:21 -07:00
2017-09-19 10:08:23 -05:00
2017-09-19 10:08:23 -05:00
2017-09-19 10:08:23 -05:00
2017-09-19 10:08:23 -05:00
2017-07-20 21:24:21 -07:00
2017-07-20 21:24:21 -07:00
2018-05-11 18:05:43 -04:00
2017-07-20 21:24:21 -07:00