prplos/package/system
Matthias FRANCK 11293c4826
procd: add patch to mount sys and proc with relatime option
Lxc automatically mounts sys and proc in the rootfs of the container. When an unprivileged container is created however, the sys and proc of the host should be mounted with option relatime. The procd of openwrt mounts these with option noatime. As a result, an unprivileged container cannot start.

remounting them allows starting of the containers:
mount -t sys sys -o remount,rw,nosuid,nodev,noexec,relatime /sys
mount -t proc proc -o remount,rw,nosuid,nodev,noexec,relatime /proc

The patch modifies procd to do this correctly from the start.

Issue: LCMFT-338 for unprivileged lxc containers, proc and sys should be mounted with relatime
Signed-off-by: Matthias FRANCK <matthias.franck@softathome.com>
2025-07-31 15:22:22 +00:00
..
apk build: remove broken dependency of metadata on toplevel .config variables 2025-01-03 11:10:12 +01:00
ca-certificates ca-certificates: Update to 20241223 2025-04-13 18:38:32 +02:00
fstools fstools: update to git HEAD 2024-07-14 19:45:21 +01:00
fwtool treewide: update PKG_MIRROR_HASH to zst 2024-04-06 11:24:18 +02:00
gpio-cdev/nu801 nu801: Mark as nonshared to build in step 1 2024-11-05 10:58:37 +01:00
iucode-tool packages: refresh patches 2024-05-31 11:30:06 +02:00
mtd mtd: check the return value of malloc and pread 2025-02-16 13:03:23 +01:00
openwrt-keyring openwrt-keyring: fix missing 24.10 usign key by installing it 2024-11-04 09:23:40 +00:00
opkg build: remove broken dependency of metadata on toplevel .config variables 2025-01-03 11:10:12 +01:00
procd procd: add patch to mount sys and proc with relatime option 2025-07-31 15:22:22 +00:00
refpolicy packages: refresh patches 2024-05-31 11:30:06 +02:00
rpcd rpcd: update to git HEAD 2024-09-17 19:07:53 +01:00
selinux-policy treewide: update PKG_MIRROR_HASH to zst 2024-04-06 11:24:18 +02:00
ubox ubox: update to Git HEAD (2024-04-26) 2024-04-27 13:34:13 +02:00
ubus ubus: update to Git HEAD (2025-07-02) 2025-07-17 10:45:15 +02:00
ucert treewide: update PKG_MIRROR_HASH to zst 2024-04-06 11:24:18 +02:00
uci uci: update to Git HEAD (2025-01-20) 2025-01-20 22:17:51 +01:00
urandom-seed treewide: disable QUILT refresh for unsupported packages 2023-10-20 16:13:13 +02:00
urngd treewide: update PKG_MIRROR_HASH to zst 2024-04-06 11:24:18 +02:00
usign treewide: update PKG_MIRROR_HASH to zst 2024-04-06 11:24:18 +02:00
zram-swap