[CI:DOCS] Add --userns=keep-id, --uidmap, --gidmap troubleshooting #13084

eriksjolund · 2022-01-30T15:43:29Z

Add troubleshooting advice regarding --userns=keep-id, --uidmap
and --gidmap : "Passed-in devices or files can't be accessed in
rootless container or a container creates files that can't be
accessed by the regular user on the host"

Signed-off-by: Erik Sjölund [email protected]

rhatdan · 2022-01-31T14:27:17Z

troubleshooting.md

@@ -919,3 +919,113 @@ After deleting a client VM on macOS via `podman machine stop` && `podman machine
 ### Solution

 You will need to remove the hanging gv-proxy process bound to the port in question. For example, if the port mentioned in the error message is 127.0.0.1:7777, you can use the command `kill -9 $(lsof -i:7777)` in order to identify and remove the hanging process which prevents you from starting a new VM on that default port.
+
+### 32) Passed-in devices or files can't be accessed in rootless container or a container creates files that can't be accessed by the regular user on the host


These should be broken into two separate examples. Putting them into 1 is confusing to me.

You're right. I split them in two.

troubleshooting.md

eriksjolund · 2022-02-02T06:30:53Z

Thanks @TomSweeneyRedHat for the feedback. I'll have a look during the weekend. The state of the text is still somewhat in a flow. The big picture of what I intend to put in the PR is there, but I might change a few things.

eriksjolund · 2022-02-06T11:33:28Z

I noticed that

2) Can't use volume mount, get permission denied
20) Passed-in devices or files can't be accessed in rootless container 
33) Passed-in devices or files can't be accessed in rootless container

describe different permission denied problems.
An idea would be to restructure a bit and rename the sections to:

2) Can't use volume mount, get permission denied (SELINUX)
20) Passed-in devices or files can't be accessed in rootless container (supplementary groups)
33) Passed-in devices or files can't be accessed in rootless container (UID/GID mapping)

https://github.com/eriksjolund/podman/blob/restructure_permission_denied_troubleshooting_tips/troubleshooting.md
(I created another branch)

In the other branch I also modified text regarding "Jupyter Notebook container" and "Postgres image" was modified.

troubleshooting.md

rhatdan · 2022-02-11T17:06:36Z

You have to fix your trailing whitespace.

eriksjolund · 2022-02-11T18:17:25Z

You have to fix your trailing whitespace.

Fixed

* Add troubleshooting advice: "Container creates a file that is not owned by the user's regular UID". The solution involves using the options --uidmap and --gidmap. * Add troubleshooting advice: "Passed-in devices or files can't be accessed in rootless container (UID/GID mapping problem)". The general solution involves using the options --uidmap and --gidmap. Sometimes --userns=keep-id could be used. Co-authored-by: Tom Sweeney <[email protected]> Signed-off-by: Erik Sjölund <[email protected]>

eriksjolund · 2022-02-12T06:35:41Z

I force pushed a new version that added a few sentences "Would it have been possible to run Podman in another way ..."

rhatdan · 2022-02-14T13:29:29Z

/approve

giuseppe

LGTM

openshift-ci · 2022-02-14T13:33:12Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: eriksjolund, giuseppe, rhatdan

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

~~OWNERS~~ [giuseppe,rhatdan]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

rhatdan · 2022-02-14T13:41:00Z

/lgtm

openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jan 30, 2022

eriksjolund force-pushed the troubleshooting_userns_keep_id_uidmap_gidmap branch 3 times, most recently from 9ad1d48 to ab1c0b0 Compare January 30, 2022 17:03

rhatdan reviewed Jan 31, 2022

View reviewed changes

eriksjolund force-pushed the troubleshooting_userns_keep_id_uidmap_gidmap branch 11 times, most recently from a172ef8 to 8bd0698 Compare January 31, 2022 21:56