search

opencontainers / runtime-spec

OCI Runtime Specification
http://www.opencontainers.org
Apache License 2.0
3.13k stars 535 forks source link

clarify user ns mappings and time ns offset configurations #1237

Open lifubang opened 7 months ago

lifubang commented 7 months ago

Nowadays, when we let the container to join an existing user or time namespace, we should not provide uidMappings, gidMappings, and timeOffsets configurations. Let's add some description to clarify user ns mappings and time ns offset configurations.

background:

  1. https://github.com/opencontainers/runc/issues/4122
  2. https://github.com/opencontainers/runc/pull/3985#issuecomment-1842477942