[lxc-users] dbus and uidmap

overlay fs overlayfs at gmail.com
Thu Oct 23 06:13:14 UTC 2014


I would like to connect the host's session-bus to an unprivileged container.

The connection succeeds when I use a trivial uidmap,

            uidmap: container -> host:   1000 -> 1000

With a non-trivial uidmap, dbus authorization fails because the uidmap
interferes with the scm_credentials.

Is it possible to use a non-trivial uidmap?

It seems that cgproxy has solved the uidmap problem for dbus, but
AFAIK it only applies to cgroups, not the session bus.


More information about the lxc-users mailing list