Will Andrews 4ed5e25074 Add Linux namespace delegation support ... This allows ZFS datasets to be delegated to a user/mount namespace Within that namespace, only the delegated datasets are visible Works very similarly to Zones/Jailes on other ZFS OSes As a user: ``` $ unshare -Um $ zfs list no datasets available $ echo $$ 1234 ``` As root: ``` # zfs list NAME ZONED MOUNTPOINT containers off /containers containers/host off /containers/host containers/host/child off /containers/host/child containers/host/child/gchild off /containers/host/child/gchild containers/unpriv on /unpriv containers/unpriv/child on /unpriv/child containers/unpriv/child/gchild on /unpriv/child/gchild # zfs zone /proc/1234/ns/user containers/unpriv ``` Back to the user namespace: ``` $ zfs list NAME USED AVAIL REFER MOUNTPOINT containers 129M 47.8G 24K /containers containers/unpriv 128M 47.8G 24K /unpriv containers/unpriv/child 128M 47.8G 128M /unpriv/child ``` Reviewed-by: Brian Behlendorf <behlendorf1@llnl.gov> Signed-off-by: Will Andrews <will.andrews@klarasystems.com> Signed-off-by: Allan Jude <allan@klarasystems.com> Signed-off-by: Mateusz Piotrowski <mateusz.piotrowski@klarasystems.com> Co-authored-by: Allan Jude <allan@klarasystems.com> Co-authored-by: Mateusz Piotrowski <mateusz.piotrowski@klarasystems.com> Sponsored-by: Buddy <https://buddy.works> Closes #12263		2022-06-10 09:51:46 -07:00
..
Makefile.am	autoconf: use include directives instead of recursing down cmd	2022-05-10 10:18:38 -07:00
zfs_iter.c	Forbid b{copy,zero,cmp}(). Don't include <strings.h> for <string.h>	2022-03-15 15:13:48 -07:00
zfs_iter.h	Revert "zfs list: Allow more fields in ZFS_ITER_SIMPLE mode"	2022-01-06 11:12:53 -08:00
zfs_main.c	Add Linux namespace delegation support	2022-06-10 09:51:46 -07:00
zfs_project.c	Forbid b{copy,zero,cmp}(). Don't include <strings.h> for <string.h>	2022-03-15 15:13:48 -07:00
zfs_projectutil.h	Project Quota on ZFS	2018-02-13 14:54:54 -08:00
zfs_util.h	zfs: main: don't NULL-check infallible safe_malloc()	2022-03-30 15:30:51 -07:00