Skip to content

docs: clarify subuid/subgid mapping in rootless vs userns-remap#24845

Merged
dvdksn merged 1 commit into
docker:mainfrom
lacatoire:docs/rootless-subuid-mapping
Jun 8, 2026
Merged

docs: clarify subuid/subgid mapping in rootless vs userns-remap#24845
dvdksn merged 1 commit into
docker:mainfrom
lacatoire:docs/rootless-subuid-mapping

Conversation

@lacatoire

Copy link
Copy Markdown
Contributor

Fixes #23664.

The rootless docs compared rootless to userns-remap only in terms of daemon privileges, never mentioning that the container-to-host UID mapping also differs. Adds a short bullet list after the existing comparison to spell it out and note the practical impact on bind-mount file ownership.

@lacatoire lacatoire requested a review from dvdksn as a code owner April 21, 2026 07:18
@netlify

netlify Bot commented Apr 21, 2026

Copy link
Copy Markdown

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 2d7809c
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/6a26c52dd7a2a90008d8bd75
😎 Deploy Preview https://deploy-preview-24845--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@lacatoire lacatoire force-pushed the docs/rootless-subuid-mapping branch from 162c03b to 4b91f5e Compare April 21, 2026 07:22
@dvdksn

dvdksn commented Apr 21, 2026

Copy link
Copy Markdown
Contributor

@AkihiroSuda @thaJeztah could you ptal? 🙏

Comment thread content/manuals/engine/security/rootless/_index.md

@AkihiroSuda AkihiroSuda left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Comment thread content/manuals/engine/security/rootless/_index.md
@thaJeztah thaJeztah requested a review from AkihiroSuda June 7, 2026 05:41
@lacatoire lacatoire force-pushed the docs/rootless-subuid-mapping branch from 2d4ef46 to c6248f6 Compare June 7, 2026 17:10
@github-actions github-actions Bot added area/engine Issue affects Docker engine/daemon area/security labels Jun 7, 2026

@thaJeztah thaJeztah left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@dvdksn ptal

@dvdksn

dvdksn commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Hmm, blocked by commit signature verification. That should not be required here. Looking.

@dvdksn

dvdksn commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

I guess I was wrong; can you please sign your commit with a GPG/SSH signing key please @lacatoire , thanks

@lacatoire lacatoire force-pushed the docs/rootless-subuid-mapping branch from c6248f6 to 2d7809c Compare June 8, 2026 13:35
@dvdksn dvdksn merged commit d6812eb into docker:main Jun 8, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/engine Issue affects Docker engine/daemon area/security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add/clarify how subuids and subgids are mapped in rootless docker compared to userns-remap mode

4 participants