From: Filip Schauer <f.schauer@proxmox.com>
To: pve-devel@lists.proxmox.com
Subject: superseded: [PATCH common/container/manager 0/8] implement per-mountpoint uid/gid mapping
Date: Tue, 31 Mar 2026 10:38:22 +0200 [thread overview]
Message-ID: <fb357f92-1b79-44b4-ab06-d536aa0753e3@proxmox.com> (raw)
In-Reply-To: <20260223130706.90972-1-f.schauer@proxmox.com>
Superseded by:
https://lore.proxmox.com/pve-devel/20260330141021.151921-1-f.schauer@proxmox.com/
On 23/02/2026 14:07, Filip Schauer wrote:
> Add support for configuring UID/GID mappings on individual container
> mount points without affecting the global container mapping.
>
> A new "idmap" mount point option accepts space-separated mappings:
> ```
> idmap=type:ct:host:len type:ct:host:len ...
> ```
>
> type: can be either 'u' or 'g'
> ct: ID as seen inside the container
> host: corresponding ID on the host
> len: number of consecutive IDs to map
>
> Unmapped ranges inherit the container's ID mapping.
>
> Example to pass through the host UID & GID 1005:
> ```
> mp0: /mnt/data,mp=/data,idmap=u:1005:1005:1 g:1005:1005:1
> ```
>
> This allows, for example, passing through a directory owned by a
> specific user on the host to a specific user inside the container,
> without changing the ownership on the host or configuring an ID mapping
> for the entire container.
>
> Build/Bump order:
> * pve-common
> * pve-container
> * pve-manager
>
> pve-common:
>
> Filip Schauer (3):
> tools: export O_CLOEXEC constant
> syscall: add missing mount attribute constants
> tools: add mount_setattr syscall
>
> src/PVE/Syscall.pm | 3 +++
> src/PVE/Tools.pm | 10 ++++++++++
> 2 files changed, 13 insertions(+)
>
>
> pve-container:
>
> Filip Schauer (4):
> namespaces: relax prototype of run_in_userns
> namespaces: refactor run_in_userns
> namespaces: add helper to create user namespace from idmap
> implement per-mountpoint uid/gid mapping
>
> src/PVE/LXC.pm | 85 ++++++++++++++++++++++++++++++++++++++-
> src/PVE/LXC/Config.pm | 7 ++++
> src/PVE/LXC/Namespaces.pm | 63 ++++++++++++++++++++++++-----
> src/lxc-pve-prestart-hook | 14 +++++++
> 4 files changed, 157 insertions(+), 12 deletions(-)
>
>
> pve-manager:
>
> Filip Schauer (1):
> ui: lxc/MPEdit: add "idmap" option
>
> www/manager6/lxc/MPEdit.js | 203 +++++++++++++++++++++++++++++++++++++
> 1 file changed, 203 insertions(+)
>
>
> Summary over all repositories:
> 7 files changed, 373 insertions(+), 12 deletions(-)
>
prev parent reply other threads:[~2026-03-31 8:38 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-02-23 13:04 Filip Schauer
2026-02-23 13:04 ` [PATCH common 1/8] tools: export O_CLOEXEC constant Filip Schauer
2026-02-23 13:04 ` [PATCH common 2/8] syscall: add missing mount attribute constants Filip Schauer
2026-02-23 13:04 ` [PATCH common 3/8] tools: add mount_setattr syscall Filip Schauer
2026-02-23 13:04 ` [PATCH container 4/8] namespaces: relax prototype of run_in_userns Filip Schauer
2026-02-23 13:04 ` [PATCH container 5/8] namespaces: refactor run_in_userns Filip Schauer
2026-03-06 9:32 ` Wolfgang Bumiller
2026-02-23 13:04 ` [PATCH container 6/8] namespaces: add helper to create user namespace from idmap Filip Schauer
2026-02-23 13:04 ` [PATCH container 7/8] implement per-mountpoint uid/gid mapping Filip Schauer
2026-02-27 14:39 ` Maximiliano Sandoval
2026-02-27 15:01 ` Daniel Kral
2026-02-27 15:34 ` Wolfgang Bumiller
2026-03-02 16:37 ` Filip Schauer
2026-03-02 18:05 ` Filip Schauer
2026-03-03 11:52 ` Wolfgang Bumiller
2026-03-03 13:59 ` Filip Schauer
2026-03-03 16:16 ` Wolfgang Bumiller
2026-02-23 13:04 ` [PATCH manager 8/8] ui: lxc/MPEdit: add "idmap" option Filip Schauer
2026-03-06 8:55 ` partially-applied: [PATCH common/container/manager 0/8] implement per-mountpoint uid/gid mapping Wolfgang Bumiller
2026-03-31 8:38 ` Filip Schauer [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=fb357f92-1b79-44b4-ab06-d536aa0753e3@proxmox.com \
--to=f.schauer@proxmox.com \
--cc=pve-devel@lists.proxmox.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox