GNU/Linux ◆ xterm ◆ bash 3693 views

Using my shadow-utils-newxidmap as the stop gap until a newer shadow-utils is available to centos.

See also centos7 non-root buildah for installation and podman build//buildah bud example.

Gist of the commands run in this example:

yum install -y podman buildah
podman run -it --rm busybox echo hello
su - vbatts -c "podman run -it --rm busybox echo hello"
echo $?
curl -o /etc/yum.repos.d/vbatts-shadow-utils-newxidmap-epel-7.repo https://copr.fedorainfracloud.org/coprs/vbatts/shadow-utils-newxidmap/repo/epel-7/vbatts-shadow-utils-newxidmap-epel-7.repo
cat /etc/yum.repos.d/vbatts-shadow-utils-newxidmap-epel-7.repo
yum install -y shadow-utils46-newxidmap slirp4netns
echo "user.max_user_namespaces=28633" > /etc/sysctl.d/userns.conf
sysctl -p /etc/sysctl.d/userns.conf
echo "vbatts:100000:65536" >> /etc/subuid
echo "vbatts:100000:65536" >> /etc/subgid
su - vbatts -c "podman run -it --rm busybox echo hello"
su - vbatts -c "podman run -it --rm busybox echo whoami"
su - vbatts -c "podman run -it --rm busybox echo id"