google / gvisor

Application Kernel for Containers
https://gvisor.dev
Apache License 2.0
15.87k stars 1.3k forks source link

gofer: open volumes from the initial userns #11128

Closed copybara-service[bot] closed 2 weeks ago

copybara-service[bot] commented 2 weeks ago

gofer: open volumes from the initial userns

The gofer process can encounter permission issues accessing volumes when custom user/group mappings are defined within its user namespace. To address this, the gofer now attempts to open volumes from the initial userns as a fallback mechanism.

Fixes #11040