Re: [lxc-users] How can a non-root user assign unique UID/GID range for LXC unprivileged containers ??

2018-08-22 Thread Yasoda Padala
-users@lists.linuxcontainers.org > Cc: > Bcc: > Date: Tue, 21 Aug 2018 15:37:49 +0530 > Subject: Re: [lxc-users] How can a non-root user assign unique UID/GID > range for LXC unprivileged containers ?? > Hi Xavier, > Thank you for your response. > I even tried with bigger range,

Re: [lxc-users] How can a non-root user assign unique UID/GID range for LXC unprivileged containers ??

2018-08-21 Thread Xavier Gendre
Hi, Le 21/08/2018 à 13:39, Dirk Geschke a écrit : can you check the directory permissions for /home/oxpd/.local/share/lxc/uidranges As Dirk said, your problem could be related to permissions of the rootfs itself and not to subordinate ids. Le 21/08/2018 à 12:07, Yasoda Padala a écrit

Re: [lxc-users] How can a non-root user assign unique UID/GID range for LXC unprivileged containers ??

2018-08-21 Thread Dirk Geschke
Hi Yasoda, > get the same error > > lxc-start 20180817035100.984 ERRORlxc_conf - conf.c:mount_rootfs:798 - > Permission denied - Failed to get real path for > "/home/oxpd/.local/share/lxc/uidranges/rootfs". can you check the directory permissions for

Re: [lxc-users] How can a non-root user assign unique UID/GID range for LXC unprivileged containers ??

2018-08-21 Thread Yasoda Padala
Thanks for your help, Yasoda From: Xavier Gendre To: lxc-users@lists.linuxcontainers.org Cc: Bcc: Date: Mon, 20 Aug 2018 09:24:31 +0200 Subject: Re: [lxc-users] How can a non-root user assign unique UID/GID range for LXC unprivileged containers ?? Hi Yasoda, only 10 ids is a bit short for a container. You sh

Re: [lxc-users] How can a non-root user assign unique UID/GID range for LXC unprivileged containers ??

2018-08-20 Thread Xavier Gendre
Hi Yasoda, only 10 ids is a bit short for a container. You should increase this number to cover at least the system ids 0-999. Depending on the distribution you run in your containers, you can be sharper and only involve the needed ids but they all have to be covered. Xavier Le 20/08/2018