60
60
: " ${XDG_DATA_HOME:= $HOME / .local/ share} "
61
61
: " ${XDG_CONFIG_HOME:= $HOME / .config} "
62
62
63
- if [ -z $_CONTAINERD_ROOTLESS_CHILD ]; then
63
+ if [ -z " $_CONTAINERD_ROOTLESS_CHILD " ]; then
64
64
if [ " $( id -u) " = " 0" ]; then
65
65
echo " Must not run as root"
66
66
exit 1
67
67
fi
68
68
case " $1 " in
69
69
" check" | " install" | " uninstall" )
70
- echo " Did you mean 'containerd-rootless-setuptool.sh $@ ' ?"
70
+ echo " Did you mean 'containerd-rootless-setuptool.sh $* ' ?"
71
71
exit 1
72
72
;;
73
73
esac
@@ -81,19 +81,19 @@ if [ -z $_CONTAINERD_ROOTLESS_CHILD ]; then
81
81
: " ${CONTAINERD_ROOTLESS_ROOTLESSKIT_DETACH_NETNS:= auto} "
82
82
net=$CONTAINERD_ROOTLESS_ROOTLESSKIT_NET
83
83
mtu=$CONTAINERD_ROOTLESS_ROOTLESSKIT_MTU
84
- if [ -z $net ]; then
84
+ if [ -z " $net " ]; then
85
85
if command -v slirp4netns > /dev/null 2>&1 ; then
86
86
# If --netns-type is present in --help, slirp4netns is >= v0.4.0.
87
87
if slirp4netns --help | grep -qw -- --netns-type; then
88
88
net=slirp4netns
89
- if [ -z $mtu ]; then
89
+ if [ -z " $mtu " ]; then
90
90
mtu=65520
91
91
fi
92
92
else
93
93
echo " slirp4netns found but seems older than v0.4.0. Falling back to VPNKit."
94
94
fi
95
95
fi
96
- if [ -z $net ]; then
96
+ if [ -z " $net " ]; then
97
97
if command -v vpnkit > /dev/null 2>&1 ; then
98
98
net=vpnkit
99
99
else
@@ -102,7 +102,7 @@ if [ -z $_CONTAINERD_ROOTLESS_CHILD ]; then
102
102
fi
103
103
fi
104
104
fi
105
- if [ -z $mtu ]; then
105
+ if [ -z " $mtu " ]; then
106
106
mtu=1500
107
107
fi
108
108
@@ -120,12 +120,12 @@ if [ -z $_CONTAINERD_ROOTLESS_CHILD ]; then
120
120
121
121
case " $CONTAINERD_ROOTLESS_ROOTLESSKIT_DETACH_NETNS " in
122
122
auto)
123
- if rootlesskit --help | grep -qw -- " --detach-netns" ; then
124
- CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS=--detach-netns $CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS
123
+ if rootlesskit --help | grep -qw -- " --detach-netns" ; then
124
+ CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS=" --detach-netns $CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS "
125
125
fi
126
126
;;
127
127
1 | true)
128
- CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS=--detach-netns $CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS
128
+ CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS=" --detach-netns $CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS "
129
129
;;
130
130
0 | false)
131
131
# NOP
@@ -144,18 +144,19 @@ if [ -z $_CONTAINERD_ROOTLESS_CHILD ]; then
144
144
# (by either systemd-networkd or NetworkManager)
145
145
# * /run: copy-up is required so that we can create /run/containerd (hardcoded) in our namespace
146
146
# * /var/lib: copy-up is required so that we can create /var/lib/containerd in our namespace
147
+ # shellcheck disable=SC2086
147
148
exec rootlesskit \
148
- --state-dir=$CONTAINERD_ROOTLESS_ROOTLESSKIT_STATE_DIR \
149
- --net=$net --mtu=$mtu \
150
- --slirp4netns-sandbox=$CONTAINERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SANDBOX \
151
- --slirp4netns-seccomp=$CONTAINERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SECCOMP \
152
- --disable-host-loopback --port-driver=$CONTAINERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER \
149
+ --state-dir=" $CONTAINERD_ROOTLESS_ROOTLESSKIT_STATE_DIR " \
150
+ --net=" $net " --mtu=" $mtu " \
151
+ --slirp4netns-sandbox=" $CONTAINERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SANDBOX " \
152
+ --slirp4netns-seccomp=" $CONTAINERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SECCOMP " \
153
+ --disable-host-loopback --port-driver=" $CONTAINERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER " \
153
154
--copy-up=/etc --copy-up=/run --copy-up=/var/lib \
154
155
--propagation=rslave \
155
156
$CONTAINERD_ROOTLESS_ROOTLESSKIT_FLAGS \
156
- $0 $@
157
+ " $0 " " $@ "
157
158
else
158
- [ $_CONTAINERD_ROOTLESS_CHILD = 1 ]
159
+ [ " $_CONTAINERD_ROOTLESS_CHILD " = 1 ]
159
160
# Remove the *symlinks* for the existing files in the parent namespace if any,
160
161
# so that we can create our own files in our mount namespace.
161
162
# The actual files in the parent namespace are *not removed* by this rm command.
193
194
chcon system_u:object_r:iptables_var_run_t:s0 /run
194
195
fi
195
196
196
- exec containerd $@
197
+ exec containerd " $@ "
197
198
fi
0 commit comments