tree 216b1888fe0fd97488658746b23c4b1b040a905f
parent bb725018b85e18c75ccf8db574cc799cc7569d2a
author Pras Velagapudi <psigen@gmail.com> 1623944785 -0700
committer Copybara-Service <copybara-worker@google.com> 1623944867 -0700

Add --no-log-init flag to docker sandbox.

This adds the `--no-log-init` flag (`-l`) to the internal `useradd` command used to initial the docker sandbox environment.

Without this flag, AD/LDAP/SSSD users that have large UID/GID values will be added to `lastlog`/`faillog`, but since docker does not support sparse files, this will cause the docker daemon to attempt to create a `/var/lib/docker/overlay2` entry that may consume all available disk space.

https://github.com/moby/moby/issues/5419#issuecomment-332785867

For one example, my SSSD-assigned uid is `1553201121`, which makes the _sparse_ size of my `lastlog` file 423GB.  If this uid is used by bazel's docker-sandbox, the resulting container attempts to create the full 423GB file, which I confirmed the hard way.

Closes #13506.

PiperOrigin-RevId: 379966973