From bb3097cd0a0c9df9818a3eb48eee92eed6107061 Mon Sep 17 00:00:00 2001 From: Erik Sjölund Date: Sat, 15 Jan 2022 12:59:32 +0100 Subject: [CI:DOCS] Unprivileged native overlayfs is now supported MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Erik Sjölund --- rootless.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rootless.md b/rootless.md index bee5d337b..d95e77b94 100644 --- a/rootless.md +++ b/rootless.md @@ -25,8 +25,8 @@ can easily fail * When a container root process like YUM attempts to create a file owned by a different UID, NFS Server/GPFS denies the creation. * Does not work with homedirs mounted with noexec/nodev * User can setup storage to point to other directories they can write to that are not mounted noexec/nodev -* Can not use overlayfs driver, but does support fuse-overlayfs - * Ubuntu supports non root overlay, but no other Linux distros do. +* Support for using native overlayfs as an unprivileged user is only available for Podman version >= 3.1 on a Linux kernel version >= 5.12, otherwise the slower _fuse-overlayfs_ may be used. + * A few Linux distributions (e.g. Ubuntu) have supported even older Podman and Linux kernel versions by modifying the normal Linux kernel behaviour. * Only other supported driver is VFS. * Cannot use ping out of the box. * [(Can be fixed by setting sysctl on host)](https://github.com/containers/podman/blob/master/troubleshooting.md#5-rootless-containers-cannot-ping-hosts) -- cgit v1.2.3-54-g00ecf