qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: "Alex Bennée" <alex.bennee@linaro.org>
To: Akihiko Odaki <akihiko.odaki@daynix.com>
Cc: "Philippe Mathieu-Daudé" <philmd@linaro.org>,
	"Thomas Huth" <thuth@redhat.com>,
	"Wainer dos Santos Moschetta" <wainersm@redhat.com>,
	"Beraldo Leal" <bleal@redhat.com>,
	qemu-devel@nongnu.org
Subject: Re: [PATCH] tests/docker: Specify --userns keep-id for Podman
Date: Wed, 26 Jun 2024 17:16:19 +0100	[thread overview]
Message-ID: <87v81vof1o.fsf@draig.linaro.org> (raw)
In-Reply-To: <20240626-podman-v1-1-f8c8daf2bb0a@daynix.com> (Akihiko Odaki's message of "Wed, 26 Jun 2024 20:09:37 +0900")

Akihiko Odaki <akihiko.odaki@daynix.com> writes:

> Previously we are always specifying -u $(UID) to match the UID in the
> container with one outside. This causes a problem with rootless Podman.
>
> Rootless Podman remaps user IDs in the container to ones controllable
> for the current user outside. The -u option instructs Podman to use
> a specified UID in the container but does not affect the UID remapping.
> Therefore, the UID in the container can be remapped to some other UID
> outside the container. This can make the access to bind-mounted volumes
> fail because the remapped UID mismatches with the owner of the
> directories.
>
> Replace -u $(UID) with --userns keep-id, which fixes the UID remapping.
> This change is limited to Podman because Docker does not support
> --userns keep-id.

Queued to testing/next, thanks.

-- 
Alex Bennée
Virtualisation Tech Lead @ Linaro


      reply	other threads:[~2024-06-26 16:16 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-06-26 11:09 [PATCH] tests/docker: Specify --userns keep-id for Podman Akihiko Odaki
2024-06-26 16:16 ` Alex Bennée [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=87v81vof1o.fsf@draig.linaro.org \
    --to=alex.bennee@linaro.org \
    --cc=akihiko.odaki@daynix.com \
    --cc=bleal@redhat.com \
    --cc=philmd@linaro.org \
    --cc=qemu-devel@nongnu.org \
    --cc=thuth@redhat.com \
    --cc=wainersm@redhat.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).