Skip to content

Commit

Permalink
docs: mount.md - idmapped mounts only work for root user
Browse files Browse the repository at this point in the history
As reported in #24918 and clarified in containers/crun#1632 (comment)

Signed-off-by: Evstifeev Roman <[email protected]>
  • Loading branch information
Fak3 authored Jan 23, 2025
1 parent f12bc49 commit 391f74b
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion docs/source/markdown/options/mount.md
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,8 @@ Options specific to type=**volume**:
- *U*, *chown*: *true* or *false* (default if unspecified: *false*). Recursively change the owner and group of the source volume based on the UID and GID of the container.

- *idmap*: If specified, create an idmapped mount to the target user namespace in the container.
The idmap option supports a custom mapping that can be different than the user namespace used by the container.
podman must be launched as root to use this option. The idmap option supports a custom mapping that can be different than the user
namespace used by the container.
The mapping can be specified after the idmap option like: `idmap=uids=0-1-10#10-11-10;gids=0-100-10`. For each triplet, the first value is the
start of the backing file system IDs that are mapped to the second value on the host. The length of this mapping is given in the third value.
Multiple ranges are separated with #. If the specified mapping is prepended with a '@' then the mapping is considered relative to the container
Expand Down

0 comments on commit 391f74b

Please sign in to comment.