failed to setup UID/GID map - subuid / subgid

[idesk2596]

Hi,

Until The glibc nss name service switch mechanism have support for managing subuid and subgid mappings, we're managing those files with symlinks to nfs shares.

/etc/subuid -> /nfs/.../subuid
/etc/subgid -> /nfs/.../subgid

it is working great with singularity, but trying to implement it with docker-rootless (which use rootlesskit)
we get this error:

$ rootlesskit bash
[rootlesskit:parent] error: failed to setup UID/GID map: newuidmap 81751 [0 11737 1 1 4294836224 65536] failed: : exit status 1

it works if /etc/subuid and /etc/subgid were set as a regular files.
Trying to work this out on a large HPC node scale.

can you support this?

Thanks, Kobe

[idesk2596]

?

[AkihiroSuda]

This is probably an issue of newuidmap/newuidmap, and probably they prohibit symlinking on purpose

[idesk2596]

singularity use newuidmap as well with its --fakeroot functionality and it's working well when these files are symlinks.. this is why i wonder..