netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

runsc: pass the GLIBC_TUNABLES env to the sandbox process

Browse Source 
It is required to disable rseq for runsc-race.

PiperOrigin-RevId: 653752784
This commit is contained in:
Andrei Vagin
2024-07-18 14:19:36 -07:00
committed by gVisor bot
parent 489ac10c69
commit cd56935ddf
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
runsc/sandbox/sandbox.go
+5
View File
@@ -811,6 +811,11 @@ func (s *Sandbox) createSandboxProcess(conf *config.Config, args *Args, startSyn
if !conf.TestOnlyAllowRunAsCurrentUserWithoutChroot {
// Setting cmd.Env = nil causes cmd to inherit the current process's env.
cmd.Env = []string{}
// runsc-race with glibc needs to disable rseq.
glibcTunables := os.Getenv("GLIBC_TUNABLES")
if glibcTunables != "" {
cmd.Env = append(cmd.Env, fmt.Sprintf("GLIBC_TUNABLES=%s", glibcTunables))
}
}
// If there is a gofer, sends all socket ends to the sandbox.