Cannot convert privileged LXC container to the unprivileged

LXC
1

I need to convert an existing unprivileged container to the unprivileged. I don’t know why I’m getting conflict id mapping error and what I’m doing wrong. Commands that I used:

gentoo /home/doskanoness/go/bin # ls -al
total 5226
drwxr-xr-x  3 doskanoness doskanoness       4 02-09 08:24 .
drwxr-xr-x  4 doskanoness doskanoness       4 02-08 03:28 ..
-rwxr-xr-x  1 doskanoness doskanoness 8198224 02-08 03:28 fuidshift
drwxr-xr-x 20 root        root             20 02-09 08:25 rootfs
gentoo /home/doskanoness/go/bin # ./fuidshift rootfs/ b:0:100000:65536 u:10000:1000:1
Error: Conflicting id mapping
gentoo /home/doskanoness/go/bin # cat /etc/subuid
root:100000:65536
doskanoness:100000:65536
gentoo /home/doskanoness/go/bin # cat /etc/subgid
root:100000:65536
doskanoness:100000:65536
2

The error is correct.
Your two maps overlap which isn’t supported by the tool.

You’re going to need to pass it something kinda like:

  • b:0:100000:999
  • b:10000:1000:1
  • b:101000:1001:64534

Or whatever the correct math ends up being to get the correct number with the map split in half and your punch through in the middle.