Comment on Podman: Issues with multiple users running containers simultaneously
Svinhufvud@sopuli.xyz 1 week ago
Why not just use subuids for separation instead?
podman run -d --restart unless-stopped \ --uidmap "+0:@100001:1" \ --name nginx-1 \ --port 8081:80 \ docker.io/library/nginx
podman run -d --restart unless-stopped \ --uidmap "+0:@100002:1" \ --name nginx-2 \ --port 8082:80 \ docker.io/library/nginx
MoogleMaestro@lemmy.zip 1 week ago
I mean, I might be wrong, but this only changes the mapping right? In the case that user broke containment, I would assume that they would have the user id of the user that’s running the process?
Granted this is all in theory so I’m not sure exactly – that might be a perfectly reasonable way to do it.