Commits on May 4, 2022

1. Remove tun/tap from the default device rules …

   Looking through git blame, this was added by commit 9fac183
   aka "Initial commit of runc binary", most probably by mistake.
   
   Obviously, a container should not have access to tun/tap device, unless
   it is explicitly specified in configuration.
   
   Now, removing this might create a compatibility issue, but I see no
   other choice.
   
   Aside from the obvious misconfiguration, this should also fix the
   annoying
   
   > Apr 26 03:46:56 foo.bar systemd[1]: Couldn't stat device /dev/char/10:200: No such file or directory
   
   messages from systemd on every container start, when runc uses systemd
   cgroup driver, and the system runs an old (< v240) version of systemd
   (the message was presumably eliminated by [1]).
   
   [1] systemd/systemd@d5aecba
   
   Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>

   

   kolyshkin committed May 4, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 2ce40b6
   • Browse repository at this point

   Copy the full SHA

   2ce40b6 View commit details

   Browse the repository at this point in the history