diff options
| author | Ashley Cui <acui@redhat.com> | 2022-04-25 09:12:45 -0400 |
|---|---|---|
| committer | Ashley Cui <acui@redhat.com> | 2022-04-25 09:14:04 -0400 |
| commit | 1260bf631f523e0708c458596337623977c6ac51 (patch) | |
| tree | e621c4cace3beffefa9adf094d55e84a8848d150 /rootless.md | |
| parent | ba6356280a86531d3cda7016859aef98bb3d8272 (diff) | |
| download | podman-1260bf631f523e0708c458596337623977c6ac51.tar.gz podman-1260bf631f523e0708c458596337623977c6ac51.tar.bz2 podman-1260bf631f523e0708c458596337623977c6ac51.zip | |
Revert "Switch all rootful to rootfull"
This reverts commit cc3790f332d989440eb1720e24e3619fc97c74ee.
We can't change rootful to rootfull because `rootful` is written into the machine config. Changing this will break json unmarshalling, which will break existing machines.
[NO NEW TESTS NEEDED]
Signed-off-by: Ashley Cui <acui@redhat.com>
Diffstat (limited to 'rootless.md')
| -rw-r--r-- | rootless.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/rootless.md b/rootless.md index d485290f2..39c961d2a 100644 --- a/rootless.md +++ b/rootless.md @@ -18,7 +18,7 @@ can easily fail * Some system unit configuration options do not work in the rootless container * systemd fails to apply several options and failures are silently ignored (e.g. CPUShares, MemoryLimit). Should work on cgroup V2. * Use of certain options will cause service startup failures (e.g. PrivateNetwork). The systemd services requiring `PrivateNetwork` can be made to work by passing `--cap-add SYS_ADMIN`, but the security implications should be carefully evaluated. In most cases, it's better to create an override.conf drop-in that sets `PrivateNetwork=no`. This also applies to containers run by root. -* Can not share container images with CRI-O or other rootfull users +* Can not share container images with CRI-O or other rootful users * Difficult to use additional stores for sharing content * Does not work on NFS or parallel filesystem homedirs (e.g. [GPFS](https://www.ibm.com/support/knowledgecenter/en/SSFKCN/gpfs_welcome.html)) * NFS and parallel filesystems enforce file creation on different UIDs on the server side and does not understand User Namespace. |