Otdfbt

Multi tool use

How can I use 400 ASA film in a Leica IIIf, which does not have options higher than 100?

Germany rejected my entry to Schengen countries

How to become an Editorial board member?

Why "strap-on" boosters, and how do other people say it?

If you attack a Tarrasque while swallowed, what AC do you need to beat to hit it?

How is dynamic resistance of a diode modeled for large voltage variations?

What to call a small, open stone or cement reservoir that supplies fresh water from a spring or other natural source?

400–430 degrees Celsius heated bath

Why is this python script running in background consuming 100 % CPU?

Is being an extrovert a necessary condition to be a manager?

pwaS eht tirsf dna tasl setterl fo hace dorw

Do most Taxis give Receipts in London?

Can dirty bird feeders make birds sick?

Does the fact that we can only measure the two-way speed of light undermine the axiom of invariance?

Simple Arithmetic Puzzle 7. Or is it?

How should I mix small caps with digits or symbols?

tikz: 5 squares on a row, roman numbered 1 -> 5

Was Tyrion always a poor strategist?

Connecting circles clockwise in TikZ

List of lists elementwise greater/smaller than

What city and town structures are important in a low fantasy medieval world?

Salesforce bug enabled "Modify All"

Way of refund if scammed?

How could the B-29 bomber back up under its own power?

Linux NFS (v4) user namespace file permissions

How to run a server on port 80 as a normal user on Linux?Solaris NFS: user permissionsNFS volume file permissionsYet Another NFS Permissions Error: Linux NFS4 Access Denied ('Auth Bogus Credentials (seal broken)') from NAT'd VMAutomatically change remote user with sshfsNFSv4 + SSSD + Active Directory: 'nobody' permissions when ldap_id_mapping disabledNon-root user needing chown capability on NFS client“Operation not permitted” on files over 2GB on ext4 filesystemLinux & NFS: Atomic compare-and-exchange of file ownership

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

1

I am trying to set up a rootless container setup using podman and am having a problem with file permissions on NFS (running NFSv4).

Within the user namespace, I am able to create files as root on any filesystem, and to change ownership on any local filesystem, but not on a NFS mounted filesystem. Outside of the user namespace, as real root, I am able to change ownership of the same file to either a real or mapped UID.

Using buildah unshare to enter the user namespace:

> cat /etc/subuid
bruce:1065536:65536

> date > /local/testfile
> buildah unshare chown 250:250 /local/testfile
> ls -l /local/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /local/testfile

> date > /nfs/testfile
> buildah unshare chown 250:250 /nfs/testfile
chown: changing ownership of '/nfs/testfile': Operation not permitted
ERRO[0000] exit status 1 
ERRO[0000] exit status 1 
> sudo chown 1065785:1065785 /nfs/testfile
Password: 
> ls -l /nfs/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /nfs/testfile

What might I be missing here?

linux nfs nfs4 namespaces

share|improve this question

asked May 7 at 17:46

BruceBruce

62

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  The line in /etc/fstab is simply server:/home /home nfs _netdev,fsc 0 0. The mount line recorded in /proc/mounts are: rw,relatime,vers=4.0,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp6,timeo=600,retrans=2,sec=sys,clientaddr=fd12:3456::abcd,fsc,local_lock=none,addr=fd12:3456::2222 (IPs changed)
  
  – Bruce
  May 7 at 21:28
  
  

  
  
  
  

add a comment | 

1

I am trying to set up a rootless container setup using podman and am having a problem with file permissions on NFS (running NFSv4).

Within the user namespace, I am able to create files as root on any filesystem, and to change ownership on any local filesystem, but not on a NFS mounted filesystem. Outside of the user namespace, as real root, I am able to change ownership of the same file to either a real or mapped UID.

Using buildah unshare to enter the user namespace:

> cat /etc/subuid
bruce:1065536:65536

> date > /local/testfile
> buildah unshare chown 250:250 /local/testfile
> ls -l /local/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /local/testfile

> date > /nfs/testfile
> buildah unshare chown 250:250 /nfs/testfile
chown: changing ownership of '/nfs/testfile': Operation not permitted
ERRO[0000] exit status 1 
ERRO[0000] exit status 1 
> sudo chown 1065785:1065785 /nfs/testfile
Password: 
> ls -l /nfs/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /nfs/testfile

What might I be missing here?

linux nfs nfs4 namespaces

share|improve this question

asked May 7 at 17:46

BruceBruce

62

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  The line in /etc/fstab is simply server:/home /home nfs _netdev,fsc 0 0. The mount line recorded in /proc/mounts are: rw,relatime,vers=4.0,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp6,timeo=600,retrans=2,sec=sys,clientaddr=fd12:3456::abcd,fsc,local_lock=none,addr=fd12:3456::2222 (IPs changed)
  
  – Bruce
  May 7 at 21:28
  
  

  
  
  
  

add a comment | 

I am trying to set up a rootless container setup using podman and am having a problem with file permissions on NFS (running NFSv4).

Within the user namespace, I am able to create files as root on any filesystem, and to change ownership on any local filesystem, but not on a NFS mounted filesystem. Outside of the user namespace, as real root, I am able to change ownership of the same file to either a real or mapped UID.

Using buildah unshare to enter the user namespace:

> cat /etc/subuid
bruce:1065536:65536

> date > /local/testfile
> buildah unshare chown 250:250 /local/testfile
> ls -l /local/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /local/testfile

> date > /nfs/testfile
> buildah unshare chown 250:250 /nfs/testfile
chown: changing ownership of '/nfs/testfile': Operation not permitted
ERRO[0000] exit status 1 
ERRO[0000] exit status 1 
> sudo chown 1065785:1065785 /nfs/testfile
Password: 
> ls -l /nfs/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /nfs/testfile

What might I be missing here?

linux nfs nfs4 namespaces

share|improve this question

asked May 7 at 17:46

BruceBruce

62

> cat /etc/subuid
bruce:1065536:65536

> date > /local/testfile
> buildah unshare chown 250:250 /local/testfile
> ls -l /local/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /local/testfile

> date > /nfs/testfile
> buildah unshare chown 250:250 /nfs/testfile
chown: changing ownership of '/nfs/testfile': Operation not permitted
ERRO[0000] exit status 1 
ERRO[0000] exit status 1 
> sudo chown 1065785:1065785 /nfs/testfile
Password: 
> ls -l /nfs/testfile
-rw-rw-r-- 1 1065785 1065785 29 May 6 11:51 /nfs/testfile

share|improve this question

asked May 7 at 17:46

BruceBruce

62

share|improve this question

asked May 7 at 17:46

BruceBruce

62

asked May 7 at 17:46

BruceBruce

62

asked May 7 at 17:46

BruceBruce

62