Skip to content

docs: clarify subuid/subgid mapping in rootless vs userns-remap#24845

Open
lacatoire wants to merge 2 commits intodocker:mainfrom
lacatoire:docs/rootless-subuid-mapping
Open

docs: clarify subuid/subgid mapping in rootless vs userns-remap#24845
lacatoire wants to merge 2 commits intodocker:mainfrom
lacatoire:docs/rootless-subuid-mapping

Conversation

@lacatoire
Copy link
Copy Markdown
Contributor

Fixes #23664.

The rootless docs compared rootless to userns-remap only in terms of daemon privileges, never mentioning that the container-to-host UID mapping also differs. Adds a short bullet list after the existing comparison to spell it out and note the practical impact on bind-mount file ownership.

@lacatoire lacatoire requested a review from dvdksn as a code owner April 21, 2026 07:18
@netlify
Copy link
Copy Markdown

netlify bot commented Apr 21, 2026

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 2d4ef46
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/69e76831ad4b530008226398
😎 Deploy Preview https://deploy-preview-24845--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@lacatoire lacatoire force-pushed the docs/rootless-subuid-mapping branch from 162c03b to 4b91f5e Compare April 21, 2026 07:22
@dvdksn
Copy link
Copy Markdown
Contributor

dvdksn commented Apr 21, 2026

@AkihiroSuda @thaJeztah could you ptal? 🙏

This difference matters when setting file permissions on bind-mounted
directories: in rootless mode, files owned by your host user appear as owned
by `root` inside the container.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The changes should be a subpage to avoid inflating the amount of the contents in a single page

Copy link
Copy Markdown
Contributor

@AkihiroSuda AkihiroSuda left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Addresses review feedback asking to keep _index.md concise.
except `newuidmap` and `newgidmap`, which are needed to allow multiple
UIDs/GIDs to be used in the user namespace.


Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Irrelevant changes

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add/clarify how subuids and subgids are mapped in rootless docker compared to userns-remap mode

3 participants