Description

The task

When the Dagger engine creates overlay mounts and subsequently unmounts them, those mounts can leak into child process mount namespaces. This happens when a child process (e.g., a `runc` container initialization) forks before the unmount occurs. The leaked mount then becomes a stale overlay mount inside the child’s…