Skip to content

libpod: use original IDs if idmap is provided#22229

Merged
openshift-merge-bot[bot] merged 1 commit intocontainers:mainfrom
giuseppe:fix-idmap-existing-volume
Apr 1, 2024
Merged

libpod: use original IDs if idmap is provided#22229
openshift-merge-bot[bot] merged 1 commit intocontainers:mainfrom
giuseppe:fix-idmap-existing-volume

Conversation

@giuseppe
Copy link
Copy Markdown
Member

if the volume is mounted with "idmap", there should not be any mapping using the user namespace mappings since this is done at runtime using the "idmap" kernel feature.

Closes: #22228

Does this PR introduce a user-facing change?

If a volume is used with `:idmap`, do not map the volume owner to the mappings inside the user namespace

if the volume is mounted with "idmap", there should not be any mapping
using the user namespace mappings since this is done at runtime using
the "idmap" kernel feature.

Closes: containers#22228

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Mar 31, 2024

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: giuseppe

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Mar 31, 2024
@packit-as-a-service
Copy link
Copy Markdown

Ephemeral COPR build failed. @containers/packit-build please check.

@baude
Copy link
Copy Markdown
Member

baude commented Apr 1, 2024

lgtm

@mheon
Copy link
Copy Markdown
Member

mheon commented Apr 1, 2024

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Apr 1, 2024
@openshift-merge-bot openshift-merge-bot bot merged commit e1f4952 into containers:main Apr 1, 2024
@stale-locking-app stale-locking-app bot added the locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. label Jul 1, 2024
@stale-locking-app stale-locking-app bot locked as resolved and limited conversation to collaborators Jul 1, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. locked - please file new issue/PR Assist humans wanting to comment on an old issue or PR with locked comments. release-note

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Wrong permissions on idmapped volumes created before starting the container when container-dir does not exist

3 participants