I’m having an issue with running a WordPress container in rootless mode I run php-fpm container under compose, using user: 1011:1011 I have a local directory mounted into /var/www/html all files in this directory are chown 1011:1011 when I connect to the container and ps I see all processes runn…

Rootless container uses user namespaces so the id in the host is not the same as the id in the container [image] [Help Needed] How to mount a directory as a non-root user in a container General Discussions I quickly tested it on Linux. It looks like on Linux it is indeed …

Hi @rimelek , thank you for the reply. At the bottom of your reply I see the following: Or… You could simply install Docker CE instead of the desktop and you can be sure that UIDs inside the container will be the same as outside. I am on docker-ce, not desktop, does this still apply to me?

Docker Desktop has to run as your user so it has very similar mechanisms, but different on each platform. I didn’t notice the topic was about Docker Desktop, but notice this part in my first sentence: It looks like on Linux it is indeed works as rootless Docker So yes, the answer was about Rootl…

Thank you for your reply, for anyone else looking at this thread: I looked at the actual UID for files that were created by the container which turned out to be 821906, so for now I chown’d all files to 821906:821906 and that seems to have fixed the issue temporarily. I deploy all things on my vps …

You can always check the subuid and subgid files from an Ansible task and calculate the right IDs for the host. Oh and you can use rootlesskit as well so you don’T have to calculate anything [image] GitHub - rootless-containers/rootlesskit: Linux-native "fake root" for... Linux-native …

I was aware of rootlesskit, but wasn’t aware what it actually did in detail. Thank you for reminding me, I’m now doing research on how it can be useful.

Now that I slept on it, using rootlesskit can help to create files with the right permissions, but wouldn’t help much in Ansible. On the other hand, you don’t even need to detect what is in the subuid and subgid fiiles, since you can generate new files from Ansible, so you will know exactly what IDs…

that’s a good reference point, I figured I would just read the subuid file and parse and keep the info as a fact in ansible, and use it to chown files. I haven’t implemented it so far, but will need to next weekend. I was hoping to use getent but it doesn’t have subuid etc as a database so will have…

Docker volume file ownership issues under rootless

General

rimelek (Ákos Takács) July 20, 2024, 9:34pm 2

Rootless container uses user namespaces so the id in the host is not the same as the id in the container

Topic		Replies	Views
Why is rootless docker still running as root inside container? General docker	5	6952	March 7, 2023
Bind mounting permissions with USER broken using rootless docker General	7	10759	August 23, 2023
Docker-rootless high UIDs issues General	1	4087	October 9, 2020
Docker rootless - unable to write to volume Compose	1	6510	November 19, 2022
Map more UID on rootless Docker and mount volume General docker	7	14872	September 9, 2022

Docker volume file ownership issues under rootless

Related topics