Disk: Allow volume `security.shifted` and directory `shift` to be enabled when `raw.idmap` is set on a VM - #18918

Merged

tomponline merged 11 commits into

canonical:mainfrom

tomponline:tp-virtiofsd-userns

Sep 8, 2026

Commits on Sep 7, 2026

lxd/subprocess/proc: Adds enableSetgroups argument to SetUserns
tomponline
committed
1254104
lxd/subprocess/proc: Add support for specifying current working dir
tomponline
committed
fba81a3
lxd/device/device/utils/disk: Adds diskVMVirtiofsdResolveIDMaps function and tests
tomponline
committed
96c5ccc
lxd/device/device/utils/disk: Always run virtiofsd in a userns
tomponline
committed
6cc3351
lxd/device/device/utils/disk: Run virtiofsd with a current working dir of /
tomponline
committed
daf02e6
lxd/device/device/utils/disk: Allow virtiofsd to drop supplementary groups when run inside a userns from DiskVMVirtiofsdStart
tomponline
committed
2f39e99
lxd/device: Disable virtiofsd idmap for shifted volumes

jonathan-conder
authored and
tomponline
committed
303f901
lxd/device/disk: If a directory share is using `shift=true` also use deviceConfig.MountOwnerShiftDynamic mode
tomponline
committed
f9542ba
lxd/device/disk: Update shift setting docs
tomponline
committed
dedbf14
doc: Update metadata
tomponline
committed
cb26584
test: Adds VM directory shift test
tomponline
committed
d61c520