search for: managing_containers

...e. you can run a > container without any root permissions). subuid/subgid is used to map > a range of UID/GIDs to the process namespace inside the kernel. > > Some details here: > > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html-single/managing_containers/index#set_up_for_rootless_containers > > It's actually pretty cool. > > So, now when accounts are created with useradd, subuids are assigned > to that new user. > > Unfortunately, this doesn't really work in an enterprise environment > when users are defined via L...

Dear Experts, Could someone enlighten me about the following file: /etc/subuid ? This file appears to be owned by "setup" package. This is CentOS 7 system, and until now these files if existed were never changed. Today I have added user quite routine way, by doing /usr/sbin/groupadd -g 4500 [username] /usr/sbin/useradd -g [username] -u 4500 -c "User Name, email at domain"

...an for rootless containers (i.e. you can run a container without any root permissions). subuid/subgid is used to map a range of UID/GIDs to the process namespace inside the kernel. Some details here: https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html-single/managing_containers/index#set_up_for_rootless_containers It's actually pretty cool. So, now when accounts are created with useradd, subuids are assigned to that new user. Unfortunately, this doesn't really work in an enterprise environment when users are defined via LDAP, since no subuid/subgid entries are...

...ontainer without any root permissions). subuid/subgid is used to map > > a range of UID/GIDs to the process namespace inside the kernel. > > > > Some details here: > > > > https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html-single/managing_containers/index#set_up_for_rootless_containers > > > > It's actually pretty cool. > > > > So, now when accounts are created with useradd, subuids are assigned > > to that new user. > > > > Unfortunately, this doesn't really work in an enterprise environment &...

...$ lvm lvextend -r -l +50%FREE atomicos/root $ atomic storage modify --driver overlay2 $ systemctl start docker For more information on storage management options, see the upstream RHEL documentation (https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html-single/managing_containers/#overlay_graph_driver). ## Containerized Master CentOS Atomic Host ships without the kubernetes-master package built into the image. For information on how to run these kubernetes components as system containers, consult the CentOS wiki (https://wiki.centos.org/SpecialInterestGroup/Atomic/Downloa...

...$ lvm lvextend -r -l +50%FREE atomicos/root $ atomic storage modify --driver overlay2 $ systemctl start docker For more information on storage management options, see the upstream RHEL documentation (https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux_atomic_host/7/html-single/managing_containers/#overlay_graph_driver). ## Containerized Master CentOS Atomic Host ships without the kubernetes-master package built into the image. For information on how to run these kubernetes components as system containers, consult the CentOS wiki (https://wiki.centos.org/SpecialInterestGroup/Atomic/Downloa...