4 ms·
I hadn’t run across shiftfs before - does this mean the podman style of subuid/subgid allocations no longer need to be manually managed?
by CraigJPerry 6y ago
I hadn’t run across shiftfs before - does this mean the podman style of subuid/subgid allocations no longer need to be manually managed?
- ctalledo 6y agoCorrect; Sysbox always enables the user-namespace in containers and manages the subuid/subgid allocation. In the open-source version, it assigns all containers the same subuid/subgid range, which is not ideal for cross-container isolation. In the enterprise-version (Sysbox-EE), it assigns an exclusive subuid/subgid range to each container automatically.