Groups > linux.debian.user > #239240 > unrolled thread

Cannot start unprivileged container without root mapping

Started by	pk <pkoroau@gmail.com>
First post	2021-08-23 11:50 +0200
Last post	2021-08-23 11:50 +0200
Articles	1 — 1 participant

Back to article view | Back to linux.debian.user

  Cannot start unprivileged container without root mapping pk <pkoroau@gmail.com> - 2021-08-23 11:50 +0200

#239240 — Cannot start unprivileged container without root mapping

From	pk <pkoroau@gmail.com>
Date	2021-08-23 11:50 +0200
Subject	Cannot start unprivileged container without root mapping
Message-ID	<CPeKB-5hv-1@gated-at.bofh.it>

Hello, starting this container on a stock Debian 11 Bullseye errors out.
It seems to me it should be supported, from this comment and thread:
<https://github.com/lxc/lxc/issues/2033#issuecomment-354982434>.
However, changing the config to match that POC gives the same error.
What's missing? Should I ask upstream?


$ cat > test_config <<EOF
    lxc.uts.name=a10
    lxc.idmap = u 1000 101000 1
    lxc.idmap = g 1000 101000 1
    # These two are from /usr/share/doc/lxc/README.Debian.gz
    lxc.mount.auto = proc:mixed sys:ro cgroup:mixed
    lxc.apparmor.profile = unconfined
EOF

$ # from /usr/share/doc/lxc/README.Debian.gz
$ systemd-run \
      --scope --quiet --user --property=Delegate=yes \
      lxc-unpriv-start --logfile /dev/stderr -f test_config \
                       -n machine touch /srv/example
Running scope as unit: run-[...].scope
lxc-start machine 20210823090408.589 ERROR    conf -
conf.c:userns_exec_mapped_root:4489 - No uid mapping for container
root
lxc-start machine 20210823090408.589 ERROR    terminal -
terminal.c:lxc_terminal_map_ids:856 - Failed to chown terminal
10((null))
...

[toc] | [standalone]

csiph-web

Cannot start unprivileged container without root mapping

Contents

#239240 — Cannot start unprivileged container without root mapping