Skip to content

netbootxyz not behaving well with rootless podman quadlet and squashed NFS shares #115

@Zer0PointModule

Description

@Zer0PointModule

The netbootxyz container tries to chown everything to root on boot:

COPY --chown=root:root root/ /

When using rootless Podman the root UID and GID are actually mapped to SUBID's of the rootless user. when using NFS and squashing all users to a certain user and group id, the container then loses control over it's own folders because all further actions are mapped to the same userid and groupid and those don't have permission to change ownership of a folder owned by a random SUBID.

Other steps later have issues (no longer have the permission) to chown it back to the proper passed PUID and PGID because it can't change permissions of the folder it just tried to chown to "root" any longer.

This is indeed an edge case problem due to the use of NFS permission squashing (https://www.opswat.com/docs/mdss/3.4.3/knowledge-base/what-is-user-squashing-for-network-file-system-nfs)

Still if this forced chowning wouldn't happen there also wouldn't be any problems even with a more obscure setup like this.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions