解决Portable 设备中Continer里无法使用sudo的问题

解决Portable 设备中Continer里无法使用sudo的问题

环境

使用nspawn 部署的Archlinux. Container本身通过移动设备Mount到Host.

出错现象

执行sudo命令,提示:
sudo: effective uid is not 0, is /usr/bin/sudo on a file system with. the 'nosuid' option set or an NFS file system without root privileges?

原因

sudo works with a mechanism that is called setuid (Set User ID, or also called suid). If that bit is set on an executable file (like sudo), then the application is executed under the permissions of the user, who is the owner of that file (in case of sudo, the owner is the root user).

That means, sudo is executed as root. So far so good. But, now nothing prevents you from inserting an USB-drive with a shell on it, that has the setuid bit set. You have full root access! That’s why normally USB-drives are mounted with the mount option noexec, to prev