{"action":"created","issue":{"url":"https://api.github.com/repos/lxdock/lxdock/issues/46","repository_url":"https://api.github.com/repos/lxdock/lxdock","labels_url":"https://api.github.com/repos/lxdock/lxdock/issues/46/labels{/name}","comments_url":"https://api.github.com/repos/lxdock/lxdock/issues/46/comments","events_url":"https://api.github.com/repos/lxdock/lxdock/issues/46/events","html_url":"https://github.com/lxdock/lxdock/issues/46","id":215324095,"number":46,"title":"Better user mapping of shared folders","user":{"login":"robvdl","id":1018674,"avatar_url":"https://avatars0.githubusercontent.com/u/1018674?v=3","gravatar_id":"","url":"https://api.github.com/users/robvdl","html_url":"https://github.com/robvdl","followers_url":"https://api.github.com/users/robvdl/followers","following_url":"https://api.github.com/users/robvdl/following{/other_user}","gists_url":"https://api.github.com/users/robvdl/gists{/gist_id}","starred_url":"https://api.github.com/users/robvdl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robvdl/subscriptions","organizations_url":"https://api.github.com/users/robvdl/orgs","repos_url":"https://api.github.com/users/robvdl/repos","events_url":"https://api.github.com/users/robvdl/events{/privacy}","received_events_url":"https://api.github.com/users/robvdl/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-03-20T03:38:24Z","updated_at":"2017-03-27T23:02:12Z","closed_at":null,"body":"The way lxdock handles user mapping on shares \"sort of\" works, but inside the container the files of a share are still owned by NOBODY and NOGROUP which isn't very useful. Any files created on the share in the container will also be created with a strange UID on the host machine like 10000:10000 which isn't very nice either.\r\n\r\nThe way I dealt with this using LXD before finding LXDock is like this:\r\n\r\n* find out your user id and group on host (e.g. 1000:1000)\r\n* put this into /etc/subuid and /etc/subgid on the host (e.g. echo 'root:1000:1' | sudo tee -a /etc/subuid /etc/subgid)\r\n* Add a disk to the container, and set raw.idmap (e.g. lxc config set containername raw.idmap 'both 1000 1000'\r\n\r\nIt seems LXDock is taking a different approach using ACLs (which I did not need when using my method), but the end result is not very useful, it just makes the share writable but it doesn't seem to solve user mapping issue properly."},"comment":{"url":"https://api.github.com/repos/lxdock/lxdock/issues/comments/289611615","html_url":"https://github.com/lxdock/lxdock/issues/46#issuecomment-289611615","issue_url":"https://api.github.com/repos/lxdock/lxdock/issues/46","id":289611615,"user":{"login":"robvdl","id":1018674,"avatar_url":"https://avatars0.githubusercontent.com/u/1018674?v=3","gravatar_id":"","url":"https://api.github.com/users/robvdl","html_url":"https://github.com/robvdl","followers_url":"https://api.github.com/users/robvdl/followers","following_url":"https://api.github.com/users/robvdl/following{/other_user}","gists_url":"https://api.github.com/users/robvdl/gists{/gist_id}","starred_url":"https://api.github.com/users/robvdl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/robvdl/subscriptions","organizations_url":"https://api.github.com/users/robvdl/orgs","repos_url":"https://api.github.com/users/robvdl/repos","events_url":"https://api.github.com/users/robvdl/events{/privacy}","received_events_url":"https://api.github.com/users/robvdl/received_events","type":"User","site_admin":false},"created_at":"2017-03-27T23:02:12Z","updated_at":"2017-03-27T23:02:12Z","body":"Unfortunately I found another issue with the way lxdock does ACL's how you end up with an extra -x permission on each file (whether that is the cause I don't know)... but that does not seem to work well with Python's shutil.copytree() function which basically fails because that calls shutil.copystat which then causes an exception when os.setxattr() is called.\r\n\r\n"}}
{"actor":{"display_login":"robvdl"}}