On 7/27/22 00:41, Robin Lee Powell wrote:
I think I followed that.
In both cases, though, I'd still need the --uidmap on the exim container to map container user 93 to my local UID, yes?
I could be wrong, I'm not an expert in these things and your setup is complex. I think that perhaps the local UID doesn't matter. What matters is coordinating the mapping across all the containers, so they all have the same "view". Otherwise the UID/GIDs of files/directories in your (presumably shared) volume-mounts won't line up. Though...if you're not sharing any volumes between the containers, then I s'pose this doesn't apply. The point is, as long as you're running rootless, the actual mapping values on the host shouldn't matter (assuming the containers are happy with their user namespace). If you need to pass ---uidmap in at runtime to make the containers happy (depending on how the images are built), it's okay, but if you can avoid it entirely, that's probably going to result in easier maintenance and updates. -- Chris Evich (he/him), RHCA III Senior Quality Assurance Engineer My personal robot overlord told me to include this signature line.