Per https://docs.docker.com/storage/bind-mounts/#configure-mount-consistency-for-macos
this is just another way to specify the already ignored
"cached" and "delegated" mount options.

Signed-off-by: Marius Hoch <hoch.m00@gmail.com>

Apparently docker supports this as well, see
https://docs.docker.com/storage/volumes/#use-a-read-only-volume

Signed-off-by: Marius Hoch <hoch.m00@gmail.com>

As the title says.

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>

if setgroups is blocked to set up the user namespace, do not attempt
to use it to clear the additional groups.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

some file systems under /sys might not be accessible to an
unprivileged user.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

This is required so that the mount point shows up when buildah
is vendored into Podman.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>