Move Filesystem ownership into other subordinated uid ranges
When using unprivileged lxc/systemd-nspawn
containers the container process is shifted into subuids ranges.
This requires however that container filesystem use the same range. Most
distribution installer/bootstrap tools does provide options to achieve this.
fuidshift
allow to migrate the os filesystem tree later on. fuidshift is part
of lxd. This repo however removed all unneeded dependencies,
which comes with lxd, so it can be build and installed with a single go get
.
- Install the go compiler
- Get fuidshift:
$ go get github.com/Mic92/fuidshift
This shift uid/guid range use:
$ fuidshift path/to/rootfs/ b:0:100000:65536
and reverse it with:
$ fuidshift -r path/to/rootfs/ b:0:100000:65536