Secure and user friendly mounts for unprivileged

[tomp (Thomas Parrott)]

An issue that was preventing read only mounts with shiftfs enabled (which shifts the uid/gid of the mount into the container) has been recently fixed, so that may be of interest.

See:

Mount home directory read only permission denied

Hi, I am trying to mount my home directory to the /home/ubuntu directory in my LXD container. I want it to be read only i.e. I want to read the data inside the container but not write or modify it. But when I do try to even access a file for example with cat command, I get permission denied error. This is how I am doing it right now: lxc init ubuntu classifier lxc config device add classifier homedir disk source=$HOME path=/home/ubuntu lxc start classifier Then I go inside the container to…