Skip to content

Commit c76c13f

Browse files
Merge pull request #25106 from Fak3/patch-1
docs: mount.md - idmapped mounts only work for root user
2 parents 3b6c766 + 016f41a commit c76c13f

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

docs/source/markdown/options/mount.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ Options specific to type=**volume**:
3131
- *U*, *chown*: *true* or *false* (default if unspecified: *false*). Recursively change the owner and group of the source volume based on the UID and GID of the container.
3232

3333
- *idmap*: If specified, create an idmapped mount to the target user namespace in the container.
34+
The idmap option is only supported by Podman in rootful mode. The Linux kernel does not allow the use of idmaped file systems for unprivileged users.
3435
The idmap option supports a custom mapping that can be different than the user namespace used by the container.
3536
The mapping can be specified after the idmap option like: `idmap=uids=0-1-10#10-11-10;gids=0-100-10`. For each triplet, the first value is the
3637
start of the backing file system IDs that are mapped to the second value on the host. The length of this mapping is given in the third value.
@@ -53,7 +54,7 @@ Options specific to **bind** and **glob**:
5354

5455
- *relabel*: *shared*, *private*.
5556

56-
- *idmap*: *true* or *false* (default if unspecified: *false*). If true, create an idmapped mount to the target user namespace in the container.
57+
- *idmap*: *true* or *false* (default if unspecified: *false*). If true, create an idmapped mount to the target user namespace in the container. The idmap option is only supported by Podman in rootful mode.
5758

5859
- *U*, *chown*: *true* or *false* (default if unspecified: *false*). Recursively change the owner and group of the source volume based on the UID and GID of the container.
5960

0 commit comments

Comments
 (0)