I have a question about subuid/gid, to be sure I understand its implications.
alice has a uid
1000 on the host. Does this mean that:
A) Containers launched by 'alice' will run (the init process) as user
100.000 (or the next free id after that) on the host.
B) A user with uid
1000 inside the container will map to
100.000 on the host.
I can see why option B would make a root (uid
0) entry necessary, and that entry was there already.