[user-namespaces] Support FUSE FS shift

[aledbf]

Based on https://github.com/gitpod-io/gitpod/commits/cw/enable-fuse-userns with the latest changes in the main branch

fixes #3064

[aledbf]

/werft run

👍 started the job as gitpod-build-aledbf-enable-fuse-userns.40

[aledbf]

fuse-overlayfs on /tmp/supervisor2858486556 type fuse.fuse-overlayfs (rw,nodev,noatime,user_id=0,group_id=0,default_permissions,allow_other)
sysfs on /tmp/supervisor2858486556/sys type sysfs (ro,nosuid,nodev,noexec,relatime)
tmpfs on /tmp/supervisor2858486556/sys/fs/cgroup type tmpfs (ro,nosuid,nodev,noexec,relatime,mode=755)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/systemd type cgroup (ro,nosuid,nodev,noexec,relatime,xattr,name=systemd)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/blkio type cgroup (ro,nosuid,nodev,noexec,relatime,blkio)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/cpu,cpuacct type cgroup (ro,nosuid,nodev,noexec,relatime,cpu,cpuacct)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/freezer type cgroup (ro,nosuid,nodev,noexec,relatime,freezer)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/memory type cgroup (ro,nosuid,nodev,noexec,relatime,memory)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/net_cls,net_prio type cgroup (ro,nosuid,nodev,noexec,relatime,net_cls,net_prio)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/rdma type cgroup (ro,nosuid,nodev,noexec,relatime,rdma)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/devices type cgroup (ro,nosuid,nodev,noexec,relatime,devices)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/hugetlb type cgroup (ro,nosuid,nodev,noexec,relatime,hugetlb)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/pids type cgroup (ro,nosuid,nodev,noexec,relatime,pids)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/perf_event type cgroup (ro,nosuid,nodev,noexec,relatime,perf_event)
cgroup on /tmp/supervisor2858486556/sys/fs/cgroup/cpuset type cgroup (ro,nosuid,nodev,noexec,relatime,cpuset)
tmpfs on /tmp/supervisor2858486556/sys/firmware type tmpfs (ro,relatime)
tmpfs on /tmp/supervisor2858486556/dev type tmpfs (rw,nosuid,size=65536k,mode=755)
devpts on /tmp/supervisor2858486556/dev/pts type devpts (rw,nosuid,noexec,relatime,gid=5,mode=620,ptmxmode=666)
mqueue on /tmp/supervisor2858486556/dev/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime)
shm on /tmp/supervisor2858486556/dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,size=65536k)
/dev/sda1 on /tmp/supervisor2858486556/dev/termination-log type ext4 (rw,relatime)
udev on /tmp/supervisor2858486556/dev/net/tun type devtmpfs (rw,nosuid,relatime,size=15397932k,nr_inodes=3849483,mode=755)
/dev/sdb on /tmp/supervisor2858486556/workspace type ext4 (rw,relatime,discard)
/dev/sda1 on /tmp/supervisor2858486556/etc/hosts type ext4 (rw,relatime)
/dev/sda1 on /tmp/supervisor2858486556/etc/hostname type ext4 (rw,relatime)
/dev/sda1 on /tmp/supervisor2858486556/etc/resolv.conf type ext4 (rw,relatime)
tmpfs on /tmp/supervisor2858486556/tmp type tmpfs (rw,relatime,uid=33333,gid=33333)

[aledbf]

/werft run

👍 started the job as gitpod-build-aledbf-enable-fuse-userns.48

[aledbf]

/werft run

👍 started the job as gitpod-build-aledbf-enable-fuse-userns.50

[aledbf]

No feature preview (gitpod.io)

Filesystem     1K-blocks      Used Available Use% Mounted on
overlay        406319508 339703972  66599152  84% /
tmpfs              65536         0     65536   0% /dev
tmpfs           32933092         0  32933092   0% /sys/fs/cgroup
/dev/sdb       385996160 264531972 101787004  73% /workspace
/dev/sda1      406319508 339703972  66599152  84% /etc/hosts
shm                65536         0     65536   0% /dev/shm
tmpfs           32933092         0  32933092   0% /proc/acpi
tmpfs           32933092         0  32933092   0% /proc/scsi
tmpfs           32933092         0  32933092   0% /sys/firmware

---

Current staging (userns enabled by default)

Filesystem     1K-blocks      Used Available Use% Mounted on
fuse-overlayfs 203070420 169629048  33424988  84% /
tmpfs           15411296         0  15411296   0% /sys/fs/cgroup
tmpfs           15411296         0  15411296   0% /sys/firmware
tmpfs              65536         0     65536   0% /dev
shm                65536         0     65536   0% /dev/shm
/dev/sda1      203070420 169629048  33424988  84% /etc/hosts
udev            15397948         0  15397948   0% /dev/net/tun
/dev/sdb       385996160 123369144 242949832  34% /workspace
tmpfs           15411296    296640  15114656   2% /tmp
tmpfs           15411296         0  15411296   0% /proc/acpi
tmpfs              65536         0     65536   0% /proc/keys
tmpfs           15411296         0  15411296   0% /proc/scsi

[csweichel]

/werft run

👍 started the job as gitpod-build-aledbf-enable-fuse-userns.53

[csweichel]

Works as advertised :)

Only thing we'd need to change is the make-shared call (see comment).

[aledbf]

@csweichel, please review one more time :)

[aledbf]

@csweichel, please review. I addressed your comments.

[csweichel]

Awesome. Changes LGTM 🚀