summaryrefslogtreecommitdiff
path: root/docs/podman.1.md
diff options
context:
space:
mode:
authorGiuseppe Scrivano <gscrivan@redhat.com>2018-07-16 10:10:20 +0200
committerAtomic Bot <atomic-devel@projectatomic.io>2018-07-16 13:40:40 +0000
commit6372c977ea0e6206d137e734a981ca0bb3435e12 (patch)
tree595fb9ddd51d169492fea0d2b5ffac63de476ba7 /docs/podman.1.md
parent06c546e88d67fe7186d3da9dc245e2122511927a (diff)
downloadpodman-6372c977ea0e6206d137e734a981ca0bb3435e12.tar.gz
podman-6372c977ea0e6206d137e734a981ca0bb3435e12.tar.bz2
podman-6372c977ea0e6206d137e734a981ca0bb3435e12.zip
rootless: require subids to be present
Most images won't work without multiple ids/gids. Error out immediately if there are no multiple ids available. The error code when the user is not present in /etc/sub{g,u}id looks like: $ bin/podman run --rm -ti alpine echo hello ERRO[0000] No subuid ranges found for user "gscrivano" Closes: https://github.com/projectatomic/libpod/issues/1087 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> Closes: #1097 Approved by: rhatdan
Diffstat (limited to 'docs/podman.1.md')
-rw-r--r--docs/podman.1.md2
1 files changed, 2 insertions, 0 deletions
diff --git a/docs/podman.1.md b/docs/podman.1.md
index c946ccb02..ea7f93afa 100644
--- a/docs/podman.1.md
+++ b/docs/podman.1.md
@@ -158,6 +158,8 @@ Podman can also be used as non-root user. When podman runs in rootless mode, an
Containers created by a non-root user are not visible to other users and are not seen or managed by podman running as root.
+It is required to have multiple uids/gids set for an user. Be sure the user is present in the files `/etc/subuid` and `/etc/subgid`.
+
Images are pulled under `XDG_DATA_HOME` when specified, otherwise in the home directory of the user under `.local/share/containers/storage`.
Currently it is not possible to create a network device, so rootless containers need to run in the host network namespace. If a rootless container creates a network namespace,