Simplest way to reproduce:
sudo systemctl stop proc-sys-fs-binfmt_misc.automount # (just to be sure) unshare -mpf mount --make-rslave / mount -t proc proc /proc lxc-usernsexec # mount -t proc proc /proc # permission denied, regardless what -o options may pass.
Simplest way to reproduce:
sudo systemctl stop proc-sys- fs-binfmt_ misc.automount # (just to be sure)
unshare -mpf
mount --make-rslave /
mount -t proc proc /proc
lxc-usernsexec
# mount -t proc proc /proc # permission denied, regardless what -o options may pass.