(This is incomplete, /proc and /sys are still owned by root from outside the container, not inside)
6dac160 nspawn: add basic user namespacing support
src/nspawn/nspawn.c | 203 +++++++++++++++++++++++++++++++++++++++++----------
1 file changed, 164 insertions(+), 39 deletions(-)
Upstream: github.com