Merge branch 'fix_idmaps' into 'main'

Fix newuidmap...`: newuidmap: open of uid_map failed: Permission denied See merge request qontainers/pipglr!15
Fix newuidmap...`: newuidmap: open of uid_map failed: Permission denied
2022-12-08 12:05:44 +00:00 · 2022-12-08 06:59:02 -05:00
1 changed files with 3 additions and 1 deletions
--- a/4
+++ b/4
@@ -99,7 +99,9 @@ RUN sed -i -r \
    chmod u+s /usr/bin/new{uid,gid}map && \
    rm -f /home/podman/.bash* && \
    echo DOCKER_HOST="unix:///tmp/podman-run-1000/podman/podman.sock" > /etc/profile.d/podman.sh && \
-    echo "podman:10000:10000" | tee /etc/subuid > /etc/subgid
+    echo "podman:10000:10000" | tee /etc/subuid > /etc/subgid && \
+    setcap -n 10000 cap_setuid+ep /usr/bin/newuidmap && \
+    setcap -n 10000 cap_setuid+ep /usr/bin/newgidmap

 # Runtime rootless-mode configuration
 USER podman