Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Podman UID and GID #104

Closed
netbrain opened this issue Apr 29, 2024 · 3 comments
Closed

Podman UID and GID #104

netbrain opened this issue Apr 29, 2024 · 3 comments
Labels
enhancement New feature or request help wanted Extra attention is needed

Comments

@netbrain
Copy link
Owner

netbrain commented Apr 29, 2024

Investigate why uid and gid mapping is problematic when using gosu as introduced in #94 and fixed for podman in #102

@netbrain netbrain added enhancement New feature or request help wanted Extra attention is needed labels Apr 29, 2024
@netbrain
Copy link
Owner Author

@hobeone @perrin4869

Added this issue to see if we can solve it in a different manner in the future, so that docker and podman can be more aligned with eachother so they share the same exeution path.

@hobeone
Copy link
Contributor

hobeone commented May 5, 2024

I finally had time to spend digging into the difference between docker and podman.

Podman takes a different (and on first blush - technically better) approach to starting containers and eschewing root privileges. This makes the security model different - e.g. the container never gets root privs and so all of the sudo & gosu things we do for docker in #94 aren't necessary. I think the solution that @perrin4869 added in #102 is correct but doesn't let you run as arbitrary UID/GID. That's probably fine for the zwift use case.

Within the container it may look like it's running as root but outside it will be mapped to the user that started it. @perrin4869 is that when you see when you run it?

podman exec -it zwift-$USER ps guaxww | grep Zwift

vs

ps guaxww | grep Zwift

I think this issue can be closed out. wdyt?

@netbrain
Copy link
Owner Author

netbrain commented May 5, 2024

Agreed 👍

@netbrain netbrain closed this as completed May 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Development

No branches or pull requests

2 participants