apple / apple/container

[Request]: Allow bind mounts with specific UID/GID

Open
#165 3 comments 8 reactions 0 assignees View on GitHub
Dominant language
Swift
Stars
49.9k
Forks
1.8k
Avg merge
1d 20h
Merged PRs (30d)
22

Description

### Feature or enhancement request details

[Podman supports `--userns keep-id:uid=200,gid=210`](https://docs.podman.io/en/latest/markdown/podman-run.1.html#userns-mode).

This solves the problem that if you follow modern container guidelines, which advise you to not run your processes as root in the container, then your bind mounts suddenly all belong to root, which means that your application cannot read / write those files anymore.

Docker has hysterically never addressed this bug, but it's biting every user of such containers all the time.

Common workarounds are making a bunch of files readable / writable by all users `chmod -R a=rwX someFolder`, but that is also a bad practice.

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.