<html><head></head><body><div style="color:#000; background-color:#fff; font-family:Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1492675728065_7834">Hello,</div><div id="yui_3_16_0_ym19_1_1492675728065_7835"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_7836">I'm testing containers on a host machine without selinux so I'm trying use the idmap feature, but I must be missing something because all that I get is a readonly container for the root user.<br></div><div id="yui_3_16_0_ym19_1_1492675728065_14662"><br></div><div id="yui_3_16_0_ym19_1_1492675728065_14664" dir="ltr"># virsh version --daemon<br id="yui_3_16_0_ym19_1_1492675728065_14677">Compiled against library: libvirt 2.5.0<br id="yui_3_16_0_ym19_1_1492675728065_14678">Using library: libvirt 2.5.0<br id="yui_3_16_0_ym19_1_1492675728065_14679">Using API: QEMU 2.5.0<br id="yui_3_16_0_ym19_1_1492675728065_14680">Running hypervisor: QEMU 2.8.1<br id="yui_3_16_0_ym19_1_1492675728065_14681">Running against daemon: 2.5.0<br id="yui_3_16_0_ym19_1_1492675728065_14682"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_8000"># virsh --connect lxc:/// dumpxml lab-gentoo-01<br id="yui_3_16_0_ym19_1_1492675728065_7950"><domain type='lxc'><br id="yui_3_16_0_ym19_1_1492675728065_7951"> <name>lab-gentoo-01</name><br id="yui_3_16_0_ym19_1_1492675728065_7952"> <uuid>a9f73091-b716-4b61-95ad-fa1d0c061bef</uuid><br id="yui_3_16_0_ym19_1_1492675728065_7953"> <memory unit='KiB'>524288</memory><br id="yui_3_16_0_ym19_1_1492675728065_7954"> <currentMemory unit='KiB'>524288</currentMemory><br id="yui_3_16_0_ym19_1_1492675728065_7955"> <vcpu placement='static'>2</vcpu><br id="yui_3_16_0_ym19_1_1492675728065_7956"> <resource><br id="yui_3_16_0_ym19_1_1492675728065_7957"> <partition>/machine</partition><br id="yui_3_16_0_ym19_1_1492675728065_7958"> </resource><br id="yui_3_16_0_ym19_1_1492675728065_7959"> <os><br id="yui_3_16_0_ym19_1_1492675728065_7960"> <type arch='x86_64'>exe</type><br id="yui_3_16_0_ym19_1_1492675728065_7961"> <init>/bin/sh</init><br id="yui_3_16_0_ym19_1_1492675728065_7962"> </os><br id="yui_3_16_0_ym19_1_1492675728065_7963"> <idmap><br id="yui_3_16_0_ym19_1_1492675728065_7964"> <uid start='0' target='900' count='10'/><br id="yui_3_16_0_ym19_1_1492675728065_7965"> <gid start='0' target='900' count='10'/><br id="yui_3_16_0_ym19_1_1492675728065_7966"> </idmap><br id="yui_3_16_0_ym19_1_1492675728065_7967"> <features><br id="yui_3_16_0_ym19_1_1492675728065_7968"> <privnet/><br id="yui_3_16_0_ym19_1_1492675728065_7969"> </features><br id="yui_3_16_0_ym19_1_1492675728065_7970"> <cpu mode='host-model'><br id="yui_3_16_0_ym19_1_1492675728065_7971"> <model fallback='allow'/><br id="yui_3_16_0_ym19_1_1492675728065_7972"> </cpu><br id="yui_3_16_0_ym19_1_1492675728065_7973"> <clock offset='utc'/><br id="yui_3_16_0_ym19_1_1492675728065_7974"> <on_poweroff>destroy</on_poweroff><br id="yui_3_16_0_ym19_1_1492675728065_7975"> <on_reboot>restart</on_reboot><br id="yui_3_16_0_ym19_1_1492675728065_7976"> <on_crash>destroy</on_crash><br id="yui_3_16_0_ym19_1_1492675728065_7977"> <devices><br id="yui_3_16_0_ym19_1_1492675728065_7978"> <emulator>/usr/libexec/libvirt_lxc</emulator><br id="yui_3_16_0_ym19_1_1492675728065_7979"> <filesystem type='mount' accessmode='passthrough'><br id="yui_3_16_0_ym19_1_1492675728065_7980"> <source dir='/media/containers/lab-gentoo-01/'/><br id="yui_3_16_0_ym19_1_1492675728065_7981"> <target dir='/'/><br id="yui_3_16_0_ym19_1_1492675728065_7982"> </filesystem><br id="yui_3_16_0_ym19_1_1492675728065_7983"> <interface type='bridge'><br id="yui_3_16_0_ym19_1_1492675728065_7984"> <mac address='00:16:3e:c8:13:14'/><br id="yui_3_16_0_ym19_1_1492675728065_7985"> <source bridge='bridge-01'/><br id="yui_3_16_0_ym19_1_1492675728065_7986"> </interface><br id="yui_3_16_0_ym19_1_1492675728065_7987"> <console type='pty'><br id="yui_3_16_0_ym19_1_1492675728065_7988"> <target type='lxc' port='0'/><br id="yui_3_16_0_ym19_1_1492675728065_7989"> </console><br id="yui_3_16_0_ym19_1_1492675728065_7990"> </devices><br id="yui_3_16_0_ym19_1_1492675728065_7991"></domain><br id="yui_3_16_0_ym19_1_1492675728065_7992"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_9625"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_24487"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_24548"># ls -l /media/containers/lab-gentoo-01/<br id="yui_3_16_0_ym19_1_1492675728065_24528">total 36<br id="yui_3_16_0_ym19_1_1492675728065_24529">drwxr-xr-x 2 root root 4096 Apr 13 07:33 bin<br id="yui_3_16_0_ym19_1_1492675728065_24530">drwxr-xr-x 2 root root 18 Apr 13 03:28 boot<br id="yui_3_16_0_ym19_1_1492675728065_24531">drwxr-xr-x 7 root root 4096 Apr 18 12:45 dev<br id="yui_3_16_0_ym19_1_1492675728065_24532">drwxr-xr-x 31 root root 4096 Apr 18 12:49 etc<br id="yui_3_16_0_ym19_1_1492675728065_24533">drwxr-xr-x 2 root root 18 Apr 13 03:28 home<br id="yui_3_16_0_ym19_1_1492675728065_24534">lrwxrwxrwx 1 root root 5 Apr 13 06:13 lib -> lib64<br id="yui_3_16_0_ym19_1_1492675728065_24535">drwxr-xr-x 2 root root 4096 Apr 13 06:14 lib32<br id="yui_3_16_0_ym19_1_1492675728065_24536">drwxr-xr-x 9 root root 4096 Apr 13 07:33 lib64<br id="yui_3_16_0_ym19_1_1492675728065_24537">drwxr-xr-x 2 root root 18 Apr 13 03:28 media<br id="yui_3_16_0_ym19_1_1492675728065_24538">drwxr-xr-x 2 root root 18 Apr 13 03:28 mnt<br id="yui_3_16_0_ym19_1_1492675728065_24539">drwxr-xr-x 2 root root 18 Apr 13 03:28 opt<br id="yui_3_16_0_ym19_1_1492675728065_24540">drwxr-xr-x 2 root root 6 Apr 13 03:18 proc<br id="yui_3_16_0_ym19_1_1492675728065_24541">drwx------ 2 root root 18 Apr 13 03:28 root<br id="yui_3_16_0_ym19_1_1492675728065_24542">drwxr-xr-x 2 root root 31 Apr 13 07:32 run<br id="yui_3_16_0_ym19_1_1492675728065_24543">drwxr-xr-x 2 root root 4096 Apr 13 07:36 sbin<br id="yui_3_16_0_ym19_1_1492675728065_24544">drwxr-xr-x 2 root root 18 Apr 13 03:28 sys<br id="yui_3_16_0_ym19_1_1492675728065_24545">drwxrwxrwt 2 root root 18 Apr 13 07:36 tmp<br id="yui_3_16_0_ym19_1_1492675728065_24546">drwxr-xr-x 13 root root 4096 Apr 18 12:49 usr<br id="yui_3_16_0_ym19_1_1492675728065_24547">drwxr-xr-x 9 root root 102 Apr 13 03:28 var<br></div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_9624"># virsh --connect lxc:/// start --console lab-gentoo-01<br id="yui_3_16_0_ym19_1_1492675728065_9681">Domain lab-gentoo-01 started<br id="yui_3_16_0_ym19_1_1492675728065_9682">Connected to domain lab-gentoo-01<br id="yui_3_16_0_ym19_1_1492675728065_9683">Escape character is ^]<br id="yui_3_16_0_ym19_1_1492675728065_9684">sh-4.3# /usr/bin/id<br id="yui_3_16_0_ym19_1_1492675728065_9685">uid=0(root) gid=0(root) groups=0(root)<br id="yui_3_16_0_ym19_1_1492675728065_9686">sh-4.3# pwd<br id="yui_3_16_0_ym19_1_1492675728065_9687">/<br id="yui_3_16_0_ym19_1_1492675728065_9688">sh-4.3# touch asdf<br id="yui_3_16_0_ym19_1_1492675728065_9689">touch: cannot touch 'asdf': Permission denied<br id="yui_3_16_0_ym19_1_1492675728065_9690">sh-4.3# <br id="yui_3_16_0_ym19_1_1492675728065_9691"></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_11330"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_11331">indeed the container is using the idmap feature because the efective uid/gid map (900/900) is not allowing writes in the filesystem, but it doesn't seems very usefull. <br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_17946"><br></div><div dir="ltr" id="yui_3_16_0_ym19_1_1492675728065_17961">is it possible to have read/write containers while using idmap?<br></div><div dir="ltr"><br></div><div dir="ltr"><br id="yui_3_16_0_ym19_1_1492675728065_7993"><br></div></div></body></html>