diff options
author | Stefan Becker <chemobejk@gmail.com> | 2019-11-10 15:07:43 +0200 |
---|---|---|
committer | Stefan Becker <chemobejk@gmail.com> | 2019-12-17 08:34:12 +0200 |
commit | aec62d286296423a2f97cb376d9e11d2ea68cc8c (patch) | |
tree | 91f2c11cb38540b3aba023d06d96f6fbbaf8c0c1 /docs/source/markdown/podman-build.1.md | |
parent | 11621836df1fea1ce35d029a41bbdd4713b6a284 (diff) | |
download | podman-aec62d286296423a2f97cb376d9e11d2ea68cc8c.tar.gz podman-aec62d286296423a2f97cb376d9e11d2ea68cc8c.tar.bz2 podman-aec62d286296423a2f97cb376d9e11d2ea68cc8c.zip |
docs: add workaround for --device with rootless containers
Fixes #4477
Signed-off-by: Stefan Becker <chemobejk@gmail.com>
Diffstat (limited to 'docs/source/markdown/podman-build.1.md')
-rw-r--r-- | docs/source/markdown/podman-build.1.md | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/docs/source/markdown/podman-build.1.md b/docs/source/markdown/podman-build.1.md index 6c8f239a6..fac8296ad 100644 --- a/docs/source/markdown/podman-build.1.md +++ b/docs/source/markdown/podman-build.1.md @@ -176,6 +176,10 @@ value can be entered. The password is entered without echo. Add a host device to the container. The format is `<device-on-host>[:<device-on-container>][:<permissions>]` (e.g. --device=/dev/sdc:/dev/xvdc:rwm) +Note: if the user only has access rights via a group then accessing the device +from inside a rootless container will fail. The `crun` runtime offers a +workaround for this by adding the option `--annotation io.crun.keep_original_groups=1`. + **--disable-compression, -D** Don't compress filesystem layers when building the image unless it is required |