dissect-image: optionally allow mounting via new kernel mount API in two steps

This adds support for the new fsmount() logic of the kernel: we'll first
create an unattached fsmount fd, and then in a second step attach this
to some real file system inode – as opposed to attaching file system
directly. The benefit of this is that we can pass the open fsmount fds
over some sockets if need be, to isolate the mounting code from the
attaching code.

1 files changed, 3 insertions, 2 deletions

diff --git a/src/sysext/sysext.c b/src/sysext/sysext.c
index 5099bdcb4e..33bfb3dc80 100644
--- a/src/sysext/sysext.c
+++ b/src/sysext/sysext.c
@@ -712,8 +712,9 @@ static int merge_subprocess(Hashmap *images, const char *workspace) {
                         r = dissected_image_mount_and_warn(
                                         m,
                                         p,
-                                        UID_INVALID,
-                                        UID_INVALID,
+                                        /* uid_shift= */ UID_INVALID,
+                                        /* uid_range= */ UID_INVALID,
+                                        /* userns_fd= */ -EBADF,
                                         flags);
                         if (r < 0 && r != -ENOMEDIUM)
                                 return r;