[systemd-devel] Docker vs PrivateTmp

Colin Walters walters at verbum.org
Sun Jan 18 17:50:35 PST 2015


On Sat, Jan 17, 2015, at 11:02 PM, Lars Kellogg-Stedman wrote:
> Hello all,
> 
> With systemd 216 on Fedora 21 (kernel 3.17.8), I have run into an odd
> behavior concerning the PrivateTmp directive, and I am looking for
> help identifying this as:
> 
> - Everything Is Working As Designed, Citizen
> - A bug in Docker (some mount flag is being set incorrectly?)

This should be fixed by:
http://pkgs.fedoraproject.org/cgit/docker-io.git/commit/?id=6c9e373ee06cb1aee07d3cae426c46002663010d

i.e. having docker.service use MountFlags=private, so its mounts
aren't visible to other processes.


More information about the systemd-devel mailing list