Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support lookup of intermediate ID for uidmapping and gidmapping in --userns=auto #20699

Closed
kaivol opened this issue Nov 16, 2023 · 3 comments
Closed
Assignees
Labels
kind/feature Categorizes issue or PR as related to a new feature. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.

Comments

@kaivol
Copy link
Contributor

kaivol commented Nov 16, 2023

Feature request description

As a rootless user, the host ID in uidmapping and gidmapping in --userns=auto is mapped from the intermediate namespace, just like when using the --uidmap and --gidmap options.

But these options also support preceding the host id in the mapping with the @ symbol, which means that podman will look up the intermediate id corresponding to the given host id and it will map the found intermediate id to the given container id.

I think this functionality would be useful for the uidmapping and gidmapping options in --userns=auto, too.

Suggest potential solution

The behavior should be the same as with the --uidmapping and --gidmapping options (see podman-run -> --uidmap -> Referencing a host ID from the parent namespace).

Have you considered any alternatives?

Looking up the intermediate id manually is also possible, just a little cumbersome.

@kaivol kaivol added the kind/feature Categorizes issue or PR as related to a new feature. label Nov 16, 2023
@giuseppe
Copy link
Member

would you like to open a PR to introduce this feature?

@kaivol
Copy link
Contributor Author

kaivol commented Nov 19, 2023

Yes, I would like to look into it.

@rhatdan
Copy link
Member

rhatdan commented Nov 19, 2023

@kaivol you got it.

@github-actions github-actions bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Mar 11, 2024
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Mar 11, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
kind/feature Categorizes issue or PR as related to a new feature. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments.
Projects
None yet
Development

No branches or pull requests

3 participants