Comments (8)
giuseppe
commented on June 9, 2024
the user_allow_other is required to have multiple users inside of the container that can use the file system. Otherwise fuse-overlayfs will be usable only by the user that is mapped to the unprivileged user on the host (usually root in the container).
from fuse-overlayfs.
siretart
commented on June 9, 2024
On Fri, Jan 4, 2019, 03:02 Giuseppe Scrivano ***@***.*** wrote:
the user_allow_other is required to have multiple users inside of the
container that can use the file system. Otherwise fuse-overlayfs will be
usable only by the user that is mapped to the unprivileged user on the host
(usually root in the container).
In my tests, that option is required for the program to work at all. Is
that expected or a bug?
from fuse-overlayfs.
giuseppe
commented on June 9, 2024
it is expected
from fuse-overlayfs.
rhatdan
commented on June 9, 2024
Should we document this in podman docs?
from fuse-overlayfs.
siretart
commented on June 9, 2024
Ideally both in podman as well as in this repo.
…On Mon, Jan 7, 2019, 09:30 Daniel J Walsh ***@***.*** wrote:
Should we document this in podman docs?
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#35 (comment)>,
or mute the thread
<https://github.com/notifications/unsubscribe-auth/AByppM1xW6Qb_8mr3k5dMXLK0EAaQKQ3ks5vA1odgaJpZM4ZlZ7i>
.
from fuse-overlayfs.
rhatdan
commented on June 9, 2024
@giuseppe Can you open a PR against Podman and here to document the issue.
from fuse-overlayfs.
siretart
commented on June 9, 2024
May I ask to clarify why this additional step is necessary? What are the security tradeoffs / implications by adding this option to /etc/fuse.conf?
I imagine the answer to this question should be included in the documentaiton.
from fuse-overlayfs.
giuseppe
commented on June 9, 2024
it looks like when running in an user namespace the option in /etc/fuse.conf is not necessary. I could run fuse-overlayfs from podman without having user_allow_other.
So it seems it is failing only when running with an UID != 0. In this case we don't probably want to use user_allow_other by default.
Could you check if #39 works for you?
from fuse-overlayfs.
Related Issues (20)
- hide overlapping paths HOT 2
- `tar: .: file changed as we read it` with `fuse-overlayfs` HOT 14
- debug help to indentify partial reads on readonly overlay
- kernel crash (task blocked) when using fuse-overlayfs on tmpfs HOT 2
- change fuse-overlayfs license to GPL2 HOT 35
- Calling fuse-overlayfs in a systemd user service fails to mount anything HOT 3
- Mount with fuse-overlayfs is about 7x slower than mount with /usr/bin/mount HOT 3
- wrong inode on entries read by readdir instead of readdirplus
- Unpredictable Behavior when Upperdir is also Mountpoint HOT 5
- Extraneous "/proc seems to be mounted as readonly, it can lead to unexpected failures" HOT 1
- cp's copy_file_range vs read-only files HOT 2
- chown -R on non-empty directory changes mtime
- overlay driver is very slow in podman-in-podman builds with large COPY layer HOT 6
- What are the Supported Options in fuse-overlayfs? HOT 1
- force_mask affects permissions inside container HOT 11
- touch: setting times of 'XXX' : No such file or directory
- mkdir with permissions 0555 fails HOT 6
- Make with Fuse 2 HOT 2
- Support running fuse-overlayfs without the open fds 0, 1 and 2
- Does fuse-overlayfs support a fuse filesystem as upperdir? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from fuse-overlayfs.