[lxc-users] Mapping multiple ids

Michael Eager eager at eagerm.com
Fri Apr 3 17:05:34 UTC 2020


I want to map multiple UIDs/GIDs in my container (named 'wiki'), 
specifically my userid (1000) and apache (48).

I found this:
https://superuser.com/questions/1174344/syntax-for-setting-lxd-container-raw-idmap

I ran
$ echo -e "both 1000 1000\nboth 48 48" | lxc config set wiki raw.idmap -

The config looks like this:
   raw.idmap: |
     both 1000 1000
     both 48 48

The container does not start.  lxc monitor shows this error:

/var/log/lxd/wiki/lxc.log contains this:
lxc wiki 20200403165802.697 ERROR    start - 
start.c:proc_pidfd_open:1644 - Function not implemented - Failed to send 
signal through pidfd
lxc wiki 20200403165802.700 ERROR    conf - conf.c:lxc_map_ids:3009 - 
newuidmap failed to write mapping "newuidmap: uid range [48-49) -> 
[48-49) not allowed": newuidmap 27611 0 100000 48 48 48 1 49 100049 951 
1000 1000 1 1001 101001 64535
lxc wiki 20200403165802.700 ERROR    start - start.c:lxc_spawn:1798 - 
Failed to set up id mapping.


I'm guessing that remapping UID/GID 48 is not permitted in a 
non-privileged container.

Is there a better way to do this?

-- 
Michael Eager



More information about the lxc-users mailing list