[libvirt-users] [libvirt] LXC, user namespaces and systemd

[Stephan Sachse]

> # chown -R foo:foo /var/lib/libvirt/filesystems/mycontainer

you must "shift" the uids for the container  0 -> 666, 1 -> 667, 2 ->
668. there is a tool for this: uidmapshift

some tools may not work, because of the missing file capabilities.
chown removes all file capabilities! try ping as user inside the
container. (missing file cap cap_net_admin,cap_net_raw)

/stephan

-- 
Software is like sex, it's better when it's free!