Hi -

> Why does the specfile need to do this? Aren't subuid and subgids
> already created automatically for non-system users?

Not that I know of.  I have been experimenting with adding user
namespace support to the Kubernetes 1.35 package
(https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/).
Adding the required 'kubelet' user via sysusers does not create an
entry in these files and the kubelet will fail to start with an error
complaining that they are missing. I had to manually modify these
files.

I am still debating whether to add this feature or not since it does
require an OCI runtime like crun or runc as well as a CRI runtime with
user namespace support like containerd or cri-o. While I suspect most
users running Kubernetes on Fedora with the Fedora RPMs have this
configuration, there are other options that might be used.

best regards

On Fri, Dec 5, 2025 at 11:23 AM Maxwell G <[email protected]> wrote:
>
> Hi,
>
> On 12/5/25 12:40 PM, Brad Smith wrote:
> > Is there a macro or an available script/spec file fragment that
> > manages safe addition of a uid/gid range to /etc/subid and
> > /etc/subguid? Or, perhaps a link to a spec file that does this?
>
> Why does the specfile need to do this? Aren't subuid and subgids already
> created automatically for non-system users?
> --
> _______________________________________________
> devel mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Fedora Code of Conduct: 
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/[email protected]
> Do not reply to spam, report it: 
> https://pagure.io/fedora-infrastructure/new_issue
-- 
_______________________________________________
devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to