all lists on lists.proxmox.com
 help / color / mirror / Atom feed
From: Filip Schauer <f.schauer@proxmox.com>
To: pve-devel@lists.proxmox.com
Subject: superseded: [PATCH common/container/manager 0/8] implement per-mountpoint uid/gid mapping
Date: Tue, 31 Mar 2026 10:38:22 +0200	[thread overview]
Message-ID: <fb357f92-1b79-44b4-ab06-d536aa0753e3@proxmox.com> (raw)
In-Reply-To: <20260223130706.90972-1-f.schauer@proxmox.com>

Superseded by:
https://lore.proxmox.com/pve-devel/20260330141021.151921-1-f.schauer@proxmox.com/

On 23/02/2026 14:07, Filip Schauer wrote:
> Add support for configuring UID/GID mappings on individual container
> mount points without affecting the global container mapping.
>
> A new "idmap" mount point option accepts space-separated mappings:
> ```
> idmap=type:ct:host:len type:ct:host:len ...
> ```
>
> type: can be either 'u' or 'g'
> ct: ID as seen inside the container
> host: corresponding ID on the host
> len: number of consecutive IDs to map
>
> Unmapped ranges inherit the container's ID mapping.
>
> Example to pass through the host UID & GID 1005:
> ```
> mp0: /mnt/data,mp=/data,idmap=u:1005:1005:1 g:1005:1005:1
> ```
>
> This allows, for example, passing through a directory owned by a
> specific user on the host to a specific user inside the container,
> without changing the ownership on the host or configuring an ID mapping
> for the entire container.
>
> Build/Bump order:
> * pve-common
> * pve-container
> * pve-manager
>
> pve-common:
>
> Filip Schauer (3):
>    tools: export O_CLOEXEC constant
>    syscall: add missing mount attribute constants
>    tools: add mount_setattr syscall
>
>   src/PVE/Syscall.pm |  3 +++
>   src/PVE/Tools.pm   | 10 ++++++++++
>   2 files changed, 13 insertions(+)
>
>
> pve-container:
>
> Filip Schauer (4):
>    namespaces: relax prototype of run_in_userns
>    namespaces: refactor run_in_userns
>    namespaces: add helper to create user namespace from idmap
>    implement per-mountpoint uid/gid mapping
>
>   src/PVE/LXC.pm            | 85 ++++++++++++++++++++++++++++++++++++++-
>   src/PVE/LXC/Config.pm     |  7 ++++
>   src/PVE/LXC/Namespaces.pm | 63 ++++++++++++++++++++++++-----
>   src/lxc-pve-prestart-hook | 14 +++++++
>   4 files changed, 157 insertions(+), 12 deletions(-)
>
>
> pve-manager:
>
> Filip Schauer (1):
>    ui: lxc/MPEdit: add "idmap" option
>
>   www/manager6/lxc/MPEdit.js | 203 +++++++++++++++++++++++++++++++++++++
>   1 file changed, 203 insertions(+)
>
>
> Summary over all repositories:
>    7 files changed, 373 insertions(+), 12 deletions(-)
>




      parent reply	other threads:[~2026-03-31  8:38 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-02-23 13:04 Filip Schauer
2026-02-23 13:04 ` [PATCH common 1/8] tools: export O_CLOEXEC constant Filip Schauer
2026-02-23 13:04 ` [PATCH common 2/8] syscall: add missing mount attribute constants Filip Schauer
2026-02-23 13:04 ` [PATCH common 3/8] tools: add mount_setattr syscall Filip Schauer
2026-02-23 13:04 ` [PATCH container 4/8] namespaces: relax prototype of run_in_userns Filip Schauer
2026-02-23 13:04 ` [PATCH container 5/8] namespaces: refactor run_in_userns Filip Schauer
2026-03-06  9:32   ` Wolfgang Bumiller
2026-02-23 13:04 ` [PATCH container 6/8] namespaces: add helper to create user namespace from idmap Filip Schauer
2026-02-23 13:04 ` [PATCH container 7/8] implement per-mountpoint uid/gid mapping Filip Schauer
2026-02-27 14:39   ` Maximiliano Sandoval
2026-02-27 15:01     ` Daniel Kral
2026-02-27 15:34   ` Wolfgang Bumiller
2026-03-02 16:37     ` Filip Schauer
2026-03-02 18:05       ` Filip Schauer
2026-03-03 11:52         ` Wolfgang Bumiller
2026-03-03 13:59     ` Filip Schauer
2026-03-03 16:16       ` Wolfgang Bumiller
2026-02-23 13:04 ` [PATCH manager 8/8] ui: lxc/MPEdit: add "idmap" option Filip Schauer
2026-03-06  8:55 ` partially-applied: [PATCH common/container/manager 0/8] implement per-mountpoint uid/gid mapping Wolfgang Bumiller
2026-03-31  8:38 ` Filip Schauer [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=fb357f92-1b79-44b4-ab06-d536aa0753e3@proxmox.com \
    --to=f.schauer@proxmox.com \
    --cc=pve-devel@lists.proxmox.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal