[lxc-users] Unprivileged containers on NFS

Daniel Urist durist at ucar.edu
Thu Feb 8 15:35:18 UTC 2018


Does anybody know whether this is possible or not?

Given the popularity of NFS, I'd think this would be a pretty common use
case, and looking at the list archives, I'm not the first person to ask
this.



On Mon, Jan 29, 2018 at 11:55 AM, Daniel Urist <durist at ucar.edu> wrote:

> Is it possible to create unprivileged containers on NFS volumes? It seems
> to work fine for a privileged container, but when I try it for an
> unprivileged container I get the following errors:
>
>
>> Using image from local cache
>> Unpacking the rootfs
>> tar: ./var/mail: Cannot change ownership to uid 0, gid 8: Operation not
>> permitted
>> tar: ./var/log/wtmp: Cannot change ownership to uid 0, gid 43: Operation
>> not permitted
>> tar: ./var/log/lastlog: Cannot change ownership to uid 0, gid 43:
>> Operation not permitted
>> tar: ./var/log/dmesg: Cannot change ownership to uid 0, gid 4: Operation
>> not permitted
>> tar: ./var/log/btmp: Cannot change ownership to uid 0, gid 43: Operation
>> not permitted
>> tar: ./var/log/fsck/checkroot: Cannot change ownership to uid 0, gid 4:
>> Operation not permitted
>> tar: ./var/log/fsck/checkfs: Cannot change ownership to uid 0, gid 4:
>> Operation not permitted
>> tar: ./var/log/apt/term.log: Cannot change ownership to uid 0, gid 4:
>> Operation not permitted
>> tar: ./var/local: Cannot change ownership to uid 0, gid 50: Operation not
>> permitted
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxcontainers.org/pipermail/lxc-users/attachments/20180208/7a650307/attachment.html>


More information about the lxc-users mailing list