incusd/instance/lxc: Fix off by one idmap check

Closes #1294 Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
lxc · Oct 21, 2024 · c3dcb98 · c3dcb98
1 parent 9561e90
commit c3dcb98
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/server/instance/drivers/driver_lxc.go b/internal/server/instance/drivers/driver_lxc.go
@@ -617,7 +617,7 @@ func (d *lxc) findIdmap() (*idmap.Set, int64, error) {
 		offset = mapentries.Entries[i].HostID + mapentries.Entries[i].MapRange
 	}
 
-	if offset+size < d.state.OS.IdmapSet.Entries[0].HostID+d.state.OS.IdmapSet.Entries[0].MapRange {
+	if offset+size <= d.state.OS.IdmapSet.Entries[0].HostID+d.state.OS.IdmapSet.Entries[0].MapRange {
 		set, err := mkIdmap(offset, size)
 		if err != nil && err == idmap.ErrHostIDIsSubID {
 			return nil, 0, err