Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dangerzone may fail to run with user ID other than 1000 #624

Closed
apyrgio opened this issue Nov 23, 2023 · 2 comments
Closed

Dangerzone may fail to run with user ID other than 1000 #624

apyrgio opened this issue Nov 23, 2023 · 2 comments
Labels
blocked bug Something isn't working container

Comments

@apyrgio
Copy link
Contributor

apyrgio commented Nov 23, 2023

When Dangerzone invokes Podman, it passes a --userns keep-id argument. This invocation basically binds the user ID in the host (typically 1000) with the exact same user ID in the container (again 1000). This way, the container user (see Podman's -u dangerzone flag) can write to the mounted temp dir in the container (i.e., /tmp/dangerzone) which is owned by the user in the host.

If Dangerzone runs from a user in the host whose ID is != 1000 (e.g., 1001), then we have a problem, because the container user will still have user ID 1000, and thus --userns keep-id will not work.

Related issues: #620
Will be resolved by: #443, #625

@apyrgio apyrgio added bug Something isn't working blocked container labels Nov 23, 2023
@apyrgio
Copy link
Contributor Author

apyrgio commented Apr 18, 2024

We had another user who was bitten by this (#781). A workaround in their case was to create a user account with UID 1000, and run Dangerzone as that user with sudo -iu <user> dangerzone.

Once we merge #625, this workaround will no longer be necessary.

@apyrgio
Copy link
Contributor Author

apyrgio commented Oct 29, 2024

We have merged #443 and #625, so this issue should be resolved as well.

@apyrgio apyrgio closed this as completed Oct 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocked bug Something isn't working container
Projects
None yet
Development

No branches or pull requests

1 participant