Merge pull request containers#17371 from openshift-cherrypick-robot/c…

…herry-pick-17356-to-v4.4 [v4.4] oci: bind mount /sys with --userns=(auto|pod:)
openshift-cherrypick-robot · Feb 8, 2023 · f5670f0 · f5670f0
2 parents 5571faa + 1d76a16
commit f5670f0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/specgen/generate/oci_linux.go b/pkg/specgen/generate/oci_linux.go
@@ -83,7 +83,7 @@ func SpecGenToOCI(ctx context.Context, s *specgen.SpecGenerator, rt *libpod.Runt
 	addCgroup := true
 
 	isRootless := rootless.IsRootless()
-	isNewUserns := s.UserNS.IsContainer() || s.UserNS.IsPath() || s.UserNS.IsPrivate()
+	isNewUserns := s.UserNS.IsContainer() || s.UserNS.IsPath() || s.UserNS.IsPrivate() || s.UserNS.IsPod() || s.UserNS.IsAuto()
 
 	canMountSys := canMountSys(isRootless, isNewUserns, s)