[lxc-users] LXC unpreviliged problem with aufs mounted on nfs

[Serge E. Hallyn]

aufs on top of nfs just doesn't work.

On Sat, Mar 21, 2020 at 09:54:15AM +0800, homalu at 163.com wrote:
> Hi,All,
>      BTW, my aufs version is aufs4. 
>     And it will fail to run: useradd newuser  in the  container's bash with nfs aufs mount. The result is : useradd: failure while writing changes to /etc/shadow
> 
> Best Regards
> 
> Michael Mao
> 
> 
> 
> homalu at 163.com
>  
> From: homalu at 163.com
> Date: 2020-03-21 08:51
> To: lxc-users
> Subject: LXC unpreviliged problem with aufs mounted on nfs
> Hi, All,
>     I am working on my project that needs to use aufs as a backend for the LXC. 
>     If I set the local branch as the first rw branch for aufs, as: 
>         mount -t aufs -o br=/home/{lxcname}/data=rw:/home/base/rootfs=ro none /var/lib/lxc/containers/{lxcname}/rootfs
>     the LXC works well in unpreviliged mode, I can modify any file in the container's bash as a root user.
>     Buf if I set the nfs branch as the first rw branch, as:
>         mount -t aufs -o br=/nfsmountpoint=rw:/home/base/rootfs=ro none /var/lib/lxc/containers/{lxcname}/rootfs
>     the LXC can start up in unpreviliged mode, but I can't modify the files which's ownner is not root. It seems not working in unpreviliged mode.
>     My nfs version is nfsv4, and LXC is the latest version.
> 
>     Please help me , thanks very much.
>     
>     Best Regards.
> 
> Michael Mao
> 
> 
> homalu at 163.com
>  
> From: lxc-users-request
> Date: 2020-03-21 07:26
> To: lxc-users
> Subject: lxc-users Digest, Vol 319, Issue 5
> Send lxc-users mailing list submissions to
> lxc-users at lists.linuxcontainers.org
>  
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.linuxcontainers.org/listinfo/lxc-users
> or, via email, send a message with subject or body 'help' to
> lxc-users-request at lists.linuxcontainers.org
>  
> You can reach the person managing the list at
> lxc-users-owner at lists.linuxcontainers.org
>  
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of lxc-users digest..."
>  
>  
> Today's Topics:
>  
>    1. Quick Question (Ray Jender)
>    2. Re: Quick Question (Tomasz Chmielewski)
>    3. Re: Quick Question (Ray Jender)
>    4. Re: Quick Question (Narcis Garcia)
>    5. Re: Quick Question (Saint Michael)
>    6. Re: Updating to LXC 3.2.1 fails (Andrey Repin)
>    7. Re: Updating to LXC 3.2.1 fails (Saint Michael)
>  
>  
> _______________________________________________
> lxc-users mailing list
> lxc-users at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-users

> _______________________________________________
> lxc-users mailing list
> lxc-users at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-users