Which values can be passed to the podman run --personality=persona?

[christoph-conrads]

What arguments can one pass to podman run --personality=<persona>? The latest podman run documentation refers only to the personality(2) system call; podman help run shows LINUX and LINUX32 as examples.

My use case is to disable address space layout randomization within the container. This can be achieved with the help of setarch(8) (e.g., setarch --addr-no-randomize ./a.out) but this does not work with the default configuration in podman (cf. containers/common#1662). One way to enable this feature is disabling seccomp (cf. DFHack/dfhack#1466) but I would prefer to have an effect like calling personality(default_persona | ADDR_NO_RANDOMIZE).

[christoph-conrads]

Trying the obvious does not work:

$ podman run -i -t --rm --personality=ADDR_NO_RANDOMIZE debian:12
Error: OCI runtime error: crun: unknown persona specified `ADDR_NO_RANDOMIZE`

[nalind]

Eventually it comes down to the values that https://github.com/opencontainers/runtime-spec/blob/main/config-linux.md#personality offers: only "LINUX" and "LINUX32" should be accepted.

[christoph-conrads]

Thank you for this link which elaborates on the allowed flag values: none are supported at the time of writing.