[lxc-users] Mapping multiple ids
    Michael Eager 
    eager at eagerm.com
       
    Fri Apr  3 17:05:34 UTC 2020
    
    
  
I want to map multiple UIDs/GIDs in my container (named 'wiki'), 
specifically my userid (1000) and apache (48).
I found this:
https://superuser.com/questions/1174344/syntax-for-setting-lxd-container-raw-idmap
I ran
$ echo -e "both 1000 1000\nboth 48 48" | lxc config set wiki raw.idmap -
The config looks like this:
   raw.idmap: |
     both 1000 1000
     both 48 48
The container does not start.  lxc monitor shows this error:
/var/log/lxd/wiki/lxc.log contains this:
lxc wiki 20200403165802.697 ERROR    start - 
start.c:proc_pidfd_open:1644 - Function not implemented - Failed to send 
signal through pidfd
lxc wiki 20200403165802.700 ERROR    conf - conf.c:lxc_map_ids:3009 - 
newuidmap failed to write mapping "newuidmap: uid range [48-49) -> 
[48-49) not allowed": newuidmap 27611 0 100000 48 48 48 1 49 100049 951 
1000 1000 1 1001 101001 64535
lxc wiki 20200403165802.700 ERROR    start - start.c:lxc_spawn:1798 - 
Failed to set up id mapping.
I'm guessing that remapping UID/GID 48 is not permitted in a 
non-privileged container.
Is there a better way to do this?
-- 
Michael Eager
    
    
More information about the lxc-users
mailing list