<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<font size="-1"><font face="Verdana">I have read and think I
understand the uid/gid mapping stuff here:
<a class="moz-txt-link-freetext" href="https://insights.ubuntu.com/2017/06/15/custom-user-mappings-in-lxd-containers/">https://insights.ubuntu.com/2017/06/15/custom-user-mappings-in-lxd-containers/</a><br>
<br>
If I add a disk (directory) as a device to my container, it
seems I need to do any changing of ownership in the host, not in
the container.<br>
<br>
That makes sense because of the uid/gid mapping - to the host,
the directory is not owned by root, and so it won't let
UID=165536 chown it to someone else.<br>
<br>
Is there a way I can allow this to happen, that is still secure?<br>
<br>
If I map root in the container to root in the host (through
/etc/subuid and /etc/subgid) I think I could make this happen,
but I'm assuming this would mean that if user root in the
container ever broke out, they would be root in the host, and
that's not good.<br>
<br>
Tony<br>
<br>
</font></font>
</body>
</html>