Bug 693891

Summary: Systemd needs to mount file systems -rshared.
Product: [Fedora] Fedora Reporter: Jóhann B. Guðmundsson <johannbg>
Component: systemdAssignee: systemd-maint
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: dwalsh, harald, johannbg, kay, lpoetter, metherid, mgrepl, mschmidt, notting, plautrba, sgrubb, tcallawa, tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-08-08 18:59:01 EDT Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
Bug Depends On:    
Bug Blocks: 713562    
Description Flags
Native systemd service file none

Description Jóhann B. Guðmundsson 2011-04-05 16:25:22 EDT
Created attachment 490074 [details]
Native systemd service file

Description of problem:

The attached file is a native systemd file for upcoming F15 Feature [1]

Please read [2] on how to packaging and installing systemd Service files.

To learn more about Systemd daemon see [3].

If you have any question dont hesitate to ask them on this bug report.




Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
Actual results:

Expected results:

Additional info:
Comment 1 Daniel Walsh 2011-04-05 17:08:56 EDT
This is only needed by pam_namespace and is not really correct.

pam_namespace should be doing the 

ExecStart=/bin/mount --rbind /tmp /tmp
ExecStart=/bin/mount --rbind /var/tmp /var/tmp 
ExecStart=/bin/mount --make-private /tmp 
ExecStart=/bin/mount --make-private /var/tmp 
ExecStart=/bin/mount --rbind /home /home
ExecStart=/bin/mount --make-private /home

On any directory handed to it.  And the only thing the init script needs to do is.

ExecStart=/bin/mount --make-rshared / 

seunshare already does this and I sent a patch to pam_namespace a while back to implement something similar.
Comment 2 Bill Nottingham 2011-04-26 13:35:41 EDT
Moving systemd service RFEs to rawhide.

At this point, it is not appropriate in the Fedora 15 cycle to add these. Furthermore, at this point, we are still finalizing the packaging guidelines to handle SysV -> systemd upgrades.

We therefore request:
- wait until there are packaging guidelines (this will be announced on the devel list). This ensures that upgrades will work smoothly and we/you won't have to do multiple sets of changes.
- work on these sorts of changes for Fedora 16 where necessary, not Fedora 15, as we're trying to fix things for release.
- do *not* change a service from SysV to systemd in an existing release (such as Fedora 15), as this is the sort of behavior change that goes against our update policy, documented as https://fedoraproject.org/wiki/Updates_Policy
Comment 3 Tomas Mraz 2011-09-19 16:56:31 EDT
Yes, pam_namespace now does the make-private mounts on its own.
So only what Dan Walsh writes is needed. And I do not think it should be in the pam package as it is needed only when pam_namespace is configured to do anything at all which it is not by default.

I suppose xguest package would be more appropriate as it uses pam_namespace.
Comment 4 Daniel Walsh 2011-09-20 13:48:51 EDT
I talked to Lennart and Kay about making systemd mount / by default as rshared.  Then I can eliminate the sandbox init script altogether.
Comment 5 Fedora Admin XMLRPC Client 2011-10-20 12:25:08 EDT
This package has changed ownership in the Fedora Package Database.  Reassigning to the new owner of this component.
Comment 6 Lennart Poettering 2012-08-08 18:59:01 EDT
For F18 we changed the default mount propagation mode to "shared".