distroless icon indicating copy to clipboard operation
distroless copied to clipboard

Do not use bug UID/GID

Open akostadinov opened this issue 2 years ago • 0 comments

Describe the bug Hello. Using a high uid/gid for files in the image requires reserving a lot of uids/gids per operating system user user when running docker rootless or podman rootless.

It would be more practical to keep nonroot to be 1000 or 1001. If no files are owned by nobody, then maybe it doesn't matter so much which uid does it have assigned.

To Reproduce

$ cat /etc/subuid
user:10000:2000
$ podman pull gcr.io/distroless/static:nonroot

Expected behavior Should just work without an error.

Console Output

Error: creating build container: copying system image from manifest list: writing blob: adding layer with blob "sha256:383e1c5dd0c1830143b1230e90292ebd4219911e0512b70d250c8907c4899110": processing tar file(potentially insufficient UIDs or GIDs available in user namespace (requested 65532:65532 for /home): Check /etc/subuid and /etc/subgid if configured locally and run podman-system-migrate: lchown /home: invalid argument): exit status 1

akostadinov avatar Feb 27 '23 14:02 akostadinov