-
-
Notifications
You must be signed in to change notification settings - Fork 63
Description
The netbootxyz container tries to chown everything to root on boot:
COPY --chown=root:root root/ /
When using rootless Podman the root UID and GID are actually mapped to SUBID's of the rootless user. when using NFS and squashing all users to a certain user and group id, the container then loses control over it's own folders because all further actions are mapped to the same userid and groupid and those don't have permission to change ownership of a folder owned by a random SUBID.
Other steps later have issues (no longer have the permission) to chown it back to the proper passed PUID and PGID because it can't change permissions of the folder it just tried to chown to "root" any longer.
This is indeed an edge case problem due to the use of NFS permission squashing (https://www.opswat.com/docs/mdss/3.4.3/knowledge-base/what-is-user-squashing-for-network-file-system-nfs)
Still if this forced chowning wouldn't happen there also wouldn't be any problems even with a more obscure setup like this.