public inbox for pve-devel@lists.proxmox.com
 help / color / mirror / Atom feed
From: Filip Schauer <f.schauer@proxmox.com>
To: pve-devel@lists.proxmox.com
Subject: superseded: [PATCH common/container/manager 0/8] implement per-mountpoint uid/gid mapping
Date: Tue, 31 Mar 2026 10:38:22 +0200	[thread overview]
Message-ID: <fb357f92-1b79-44b4-ab06-d536aa0753e3@proxmox.com> (raw)
In-Reply-To: <20260223130706.90972-1-f.schauer@proxmox.com>

Superseded by:
https://lore.proxmox.com/pve-devel/20260330141021.151921-1-f.schauer@proxmox.com/

On 23/02/2026 14:07, Filip Schauer wrote:
> Add support for configuring UID/GID mappings on individual container
> mount points without affecting the global container mapping.
>
> A new "idmap" mount point option accepts space-separated mappings:
> ```
> idmap=type:ct:host:len type:ct:host:len ...
> ```
>
> type: can be either 'u' or 'g'
> ct: ID as seen inside the container
> host: corresponding ID on the host
> len: number of consecutive IDs to map
>
> Unmapped ranges inherit the container's ID mapping.
>
> Example to pass through the host UID & GID 1005:
> ```
> mp0: /mnt/data,mp=/data,idmap=u:1005:1005:1 g:1005:1005:1
> ```
>
> This allows, for example, passing through a directory owned by a
> specific user on the host to a specific user inside the container,
> without changing the ownership on the host or configuring an ID mapping
> for the entire container.
>
> Build/Bump order:
> * pve-common
> * pve-container
> * pve-manager
>
> pve-common:
>
> Filip Schauer (3):
>    tools: export O_CLOEXEC constant
>    syscall: add missing mount attribute constants
>    tools: add mount_setattr syscall
>
>   src/PVE/Syscall.pm |  3 +++
>   src/PVE/Tools.pm   | 10 ++++++++++
>   2 files changed, 13 insertions(+)
>
>
> pve-container:
>
> Filip Schauer (4):
>    namespaces: relax prototype of run_in_userns
>    namespaces: refactor run_in_userns
>    namespaces: add helper to create user namespace from idmap
>    implement per-mountpoint uid/gid mapping
>
>   src/PVE/LXC.pm            | 85 ++++++++++++++++++++++++++++++++++++++-
>   src/PVE/LXC/Config.pm     |  7 ++++
>   src/PVE/LXC/Namespaces.pm | 63 ++++++++++++++++++++++++-----
>   src/lxc-pve-prestart-hook | 14 +++++++
>   4 files changed, 157 insertions(+), 12 deletions(-)
>
>
> pve-manager:
>
> Filip Schauer (1):
>    ui: lxc/MPEdit: add "idmap" option
>
>   www/manager6/lxc/MPEdit.js | 203 +++++++++++++++++++++++++++++++++++++
>   1 file changed, 203 insertions(+)
>
>
> Summary over all repositories:
>    7 files changed, 373 insertions(+), 12 deletions(-)
>




      parent reply	other threads:[~2026-03-31  8:38 UTC|newest]

Thread overview: 20+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-02-23 13:04 Filip Schauer
2026-02-23 13:04 ` [PATCH common 1/8] tools: export O_CLOEXEC constant Filip Schauer
2026-02-23 13:04 ` [PATCH common 2/8] syscall: add missing mount attribute constants Filip Schauer
2026-02-23 13:04 ` [PATCH common 3/8] tools: add mount_setattr syscall Filip Schauer
2026-02-23 13:04 ` [PATCH container 4/8] namespaces: relax prototype of run_in_userns Filip Schauer
2026-02-23 13:04 ` [PATCH container 5/8] namespaces: refactor run_in_userns Filip Schauer
2026-03-06  9:32   ` Wolfgang Bumiller
2026-02-23 13:04 ` [PATCH container 6/8] namespaces: add helper to create user namespace from idmap Filip Schauer
2026-02-23 13:04 ` [PATCH container 7/8] implement per-mountpoint uid/gid mapping Filip Schauer
2026-02-27 14:39   ` Maximiliano Sandoval
2026-02-27 15:01     ` Daniel Kral
2026-02-27 15:34   ` Wolfgang Bumiller
2026-03-02 16:37     ` Filip Schauer
2026-03-02 18:05       ` Filip Schauer
2026-03-03 11:52         ` Wolfgang Bumiller
2026-03-03 13:59     ` Filip Schauer
2026-03-03 16:16       ` Wolfgang Bumiller
2026-02-23 13:04 ` [PATCH manager 8/8] ui: lxc/MPEdit: add "idmap" option Filip Schauer
2026-03-06  8:55 ` partially-applied: [PATCH common/container/manager 0/8] implement per-mountpoint uid/gid mapping Wolfgang Bumiller
2026-03-31  8:38 ` Filip Schauer [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=fb357f92-1b79-44b4-ab06-d536aa0753e3@proxmox.com \
    --to=f.schauer@proxmox.com \
    --cc=pve-devel@lists.proxmox.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal