Jorge Fábregas <jorge.fabregas(a)gmail.com> writes:
On 9/6/21 5:13 AM, Giuseppe Scrivano wrote:
> yes exactly, it is under the rootless user+mount namespace.
>
> You can use "podman unshare" to join the rootless user+mount namespace
> and see the overlay mount.
Thanks Giuseppe. That makes sense. So rootful containers run in the
same default root "mount namespace" and that's why I can see the overlay
mounts?
exactly. root can create mounts directly in the current mount namespace
so it doesn't need to create a new one owned by a different user
namespace.
Giuseppe