From 51ce5e4e0ac543c1a30c837e61f8b22f60e8dbb0 Mon Sep 17 00:00:00 2001 From: Chris Evich Date: Mon, 5 Dec 2022 08:49:13 -0500 Subject: [PATCH] Use single uid/gid map The podman base-image is intended to support running nested-podman both root and rootless. Since pipglr only ever runs rootless, eliminate the nested usernamespace mapping needed to support nested-root usage. Signed-off-by: Chris Evich --- Containerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Containerfile b/Containerfile index 5316c12..9771f1c 100644 --- a/Containerfile +++ b/Containerfile @@ -97,7 +97,8 @@ RUN sed -i -r \ chown -R podman:podman /home/podman && \ chmod u+s /usr/bin/new{uid,gid}map && \ rm -f /home/podman/.bash* && \ - echo DOCKER_HOST="unix:///tmp/podman-run-1000/podman/podman.sock" > /etc/profile.d/podman.sh + echo DOCKER_HOST="unix:///tmp/podman-run-1000/podman/podman.sock" > /etc/profile.d/podman.sh && \ + echo "podman:10000:10000" | tee /etc/subuid > /etc/subgid # Runtime rootless-mode configuration USER podman