If you enable user namespaces as well, then you don't need any of that. For example: [mrunal@local rootfs]$ id uid=1000(mrunal) gid=1000(mrunal) groups=100

If you enable user namespaces as well, then you don't need any of that. For example: [mrunal@local rootfs]$ id uid=1000(mrunal) gid=1000(mrunal) groups=1000(mrunal),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 [mrunal@local rootfs]$ unshare -m -u -n -i -p -f --mount-proc -r sh sh-4.4# ps -ef UID PID PPID C STIME TTY TIME CMD root 1 0 0 09:42 pts/12 00:00:00 sh root 2 1 0 09:42 pts/12 00:00:00 ps -ef sh-4.4#