Skip to content

enabling a non-root user to set the UID/GID mappings inside a sandbox

This patch enables a non-root user to map a set of UID/GID mappings from a namespace to another set outside the namespace. Since unshare is used on the main thread of the virtiofsd, once the thread goes inside a namespace it is not able to map a range of UID/GID other than the current user/group that is running the virtiofsd. This patch enables a non-root user to set multiple mappings. The UID/GID ranges can be specified using virtiofsd command line parameters.

Edited by Ellie

Merge request reports