I want to map a folder from host to container. The folder doesn’t show up in the container not even as nobody. No change on ‘privileged’. The container has been initially created on a grsec environment (with newuidmap disabled thus the 1000000 mapping). Its on unrestricted kernel now and maprange has been reduced back to 65536.
Any idea why the folder is not showing up at all?
lxc config device add alpine collectd disk source=/var/lib/collectd path=/var/lib/collectd
LXD 3.0.0
Alpine Linux (host+guest) 4.14.33-0-vanilla
LXD daemon: root:lxd
/var/lib/collectd (host): 105:106
/var/lib/collectd (container): 102:103 (folder doesn’t exist)
Config:
architecture: i686
config:
image.architecture: i386
image.description: Alpine edge i386 (20180331_17:50)
image.os: Alpine
image.release: edge
image.serial: "20180331_17:50"
raw.idmap: |-
uid 105 102
gid 106 103
security.privileged: "false"
volatile.base_image: blahblahblah
volatile.eth0.hwaddr: 00:16:3e:xx:xx:xx
volatile.eth0.name: eth0
volatile.idmap.base: "0"
volatile.idmap.next: '[{"Isuid":true,"Isgid":false,"Hostid":1000000,"Nsid":0,"Maprange":102},{"Isuid":true,"Isgid":false,"Hostid":105,"Nsid":102,"Maprange":1},{"Isuid":true,"Isgid":false,"Hostid":1000103,"Nsid":103,"Maprange":65433},{"Isuid":false,"Isgid":true,"Hostid":1000000,"Nsid":0,"Maprange":103},{"Isuid":false,"Isgid":true,"Hostid":106,"Nsid":103,"Maprange":1},{"Isuid":false,"Isgid":true,"Hostid":1000104,"Nsid":104,"Maprange":65432}]'
volatile.last_state.idmap: '[]'
volatile.last_state.power: STOPPED
devices:
collectd:
path: /var/lib/collectd
source: /var/lib/collectd
type: disk
ephemeral: false
profiles:
- default
stateful: false
description: ""
subuid:
root:1000000:65536
lxd:1000000:65536
root:105:1
lxd:105:1
subgid
root:1000000:65536
lxd:1000000:65536
root:106:1
lxd:106:1