Re: [OE-core] [PATCH] sanity: allow to compile from root in user namespaces

2020-01-03 Thread Richard Purdie
On Fri, 2020-01-03 at 13:15 +0200, Nikolai Merinov via Openembedded- core wrote: > Hi Alexander. > > I understand all of the concerns. Yes, it's possible to create a > regular user inside of containers (at least in case of the rootless > LXC and Docker containers), but this is a question of usabil

Re: [OE-core] [PATCH] sanity: allow to compile from root in user namespaces

2020-01-03 Thread Nikolai Merinov via Openembedded-core
ent: Tuesday, December 31, 2019 9:29:34 AM Subject: Re: [OE-core] [PATCH] sanity: allow to compile from root in user namespaces BQ_BEGIN I believe it should be possible to create a regular user inside the container and then run bitbake as that user? The patch effectively disables the host

Re: [OE-core] [PATCH] sanity: allow to compile from root in user namespaces

2019-12-31 Thread Alexander Kanavin
I believe it should be possible to create a regular user inside the container and then run bitbake as that user? The patch effectively disables the host contamination check, fixes one recipe that breaks, and likely introduces other issues; the assumption (and automated testing) throughout the buil

[OE-core] [PATCH] sanity: allow to compile from root in user namespaces

2019-12-31 Thread Nikolai Merinov via Openembedded-core
New rootless container subsystems rely on the "user namespaces" Linux feature. In order to create a container from a regular user the user uid and subuids mapped to the uid space inside of container. There are different default configurations used for different container subsystems: 1. Rootless