3 ms·
The container UID namespaces should be the same size, damnit. (That is how it is in Solaris/Illumos zones...)
by cryptonector 8y ago
The container UID namespaces should be the same size, damnit. (That is how it is in Solaris/Illumos zones...)
- LukeShu 8y agoLinux user namespaces work as a 1-to-1 mapping of UIDs. Every UID in the container has to map to a UID on the host, so the UID range of the container is necessarily smaller than the UID range of the host (unless of course the map is the identity, but then what's the point of having a separate namespace?). Maybe that is bad design, but if it is: it's Linux's fault, not systemd's.