From 119debeb5aaa617e54c0109907a51a5823eb8cc4 Mon Sep 17 00:00:00 2001
From: Oliver Ofenloch <57812959+ofenloch@users.noreply.github.com>
Date: Sat, 7 Mar 2026 16:05:39 +0100
Subject: [PATCH] make sure Docker runs the in host's user namespace

On machines using user namespace remapping the build process fails, because the processes inside the containers are not
allowed to acces the project's directory which is mapped as ${CURDI} into the containers. To fix this issue, the Docker
commands need to get the '--userns "host"' switch.
---
 Makefile           |  1 +
 docker-compose.yml | 16 ++++++++++++++++
 2 files changed, 17 insertions(+)

diff --git a/Makefile b/Makefile
index a0f6f6b..59e977d 100644
--- a/Makefile
+++ b/Makefile
@@ -17,6 +17,7 @@ else
 	docker buildx build --load --tag generateconfig-env --file Dockerfile-generateconfig-env .
 endif
 	docker run --rm \
+		--userns "host" \
 		--volume ${CURDIR}/:/code/:Z \
 		generateconfig-env
 
diff --git a/docker-compose.yml b/docker-compose.yml
index 413706c..97ac4cb 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,6 +1,7 @@
 services:
   # generate configs using the anyconf utility
   generateconfig-anyconf:
+    userns_mode: "host"
     restart: "no"
     build:
       context: .
@@ -12,6 +13,7 @@ services:
 
   # processing any-sync-* configs
   generateconfig-processing:
+    userns_mode: "host"
     restart: "no"
     depends_on:
       generateconfig-anyconf:
@@ -30,6 +32,7 @@ services:
       generateconfig-processing:
         condition: service_completed_successfully
     image: "mongo:${MONGO_VERSION}"
+    userns_mode: "host"
     restart: unless-stopped
     command: ["--replSet", "${MONGO_REPLICA_SET}", "--port", "${MONGO_1_PORT}"]
     volumes:
@@ -46,6 +49,7 @@ services:
       generateconfig-processing:
         condition: service_completed_successfully
     image: "redis/redis-stack-server:${REDIS_VERSION}"
+    userns_mode: "host"
     restart: unless-stopped
     command: ["redis-server", "--port", "${REDIS_PORT}", "--dir", "/data/", "--appendonly", "yes", "--maxmemory", "${REDIS_MAXMEMORY}", "--maxmemory-policy", "noeviction", "--protected-mode", "no", "--loadmodule", "/opt/redis-stack/lib/redisbloom.so"]
     volumes:
@@ -60,6 +64,7 @@ services:
 
   minio:
     image: "minio/minio:${MINIO_VERSION}"
+    userns_mode: "host"
     restart: unless-stopped
     command: ["server", "/data", "--console-address", ":${MINIO_WEB_PORT}", "--address", ":${MINIO_PORT}"]
     environment:
@@ -80,6 +85,7 @@ services:
       - "127.0.0.1:${EXTERNAL_MINIO_WEB_PORT}:${MINIO_WEB_PORT}"
 
   create-bucket:
+    userns_mode: "host"
     restart: "no"
     image: minio/mc:latest
     depends_on:
@@ -100,6 +106,7 @@ services:
         condition: service_healthy
     volumes:
       - ./etc/any-sync-coordinator:/etc/any-sync-coordinator:Z
+    userns_mode: "host"
     restart: "no"
     command: ["/bin/any-sync-confapply", "-c", "/etc/any-sync-coordinator/config.yml", "-n", "/etc/any-sync-coordinator/network.yml", "-e"]
 
@@ -123,6 +130,7 @@ services:
       resources:
         limits:
           memory: ${ANY_SYNC_DAEMONS_MEMORY_LIMIT:-}
+    userns_mode: "host"
     restart: unless-stopped
 
   any-sync-filenode:
@@ -146,6 +154,7 @@ services:
       resources:
         limits:
           memory: ${ANY_SYNC_DAEMONS_MEMORY_LIMIT:-}
+    userns_mode: "host"
     restart: unless-stopped
 
   any-sync-node-1:
@@ -168,6 +177,7 @@ services:
       resources:
         limits:
           memory: ${ANY_SYNC_DAEMONS_MEMORY_LIMIT:-}
+    userns_mode: "host"
     restart: unless-stopped
 
   any-sync-node-2:
@@ -190,6 +200,7 @@ services:
       resources:
         limits:
           memory: ${ANY_SYNC_DAEMONS_MEMORY_LIMIT:-}
+    userns_mode: "host"
     restart: unless-stopped
 
   any-sync-node-3:
@@ -212,6 +223,7 @@ services:
       resources:
         limits:
           memory: ${ANY_SYNC_DAEMONS_MEMORY_LIMIT:-}
+    userns_mode: "host"
     restart: unless-stopped
 
   any-sync-consensusnode:
@@ -230,12 +242,14 @@ services:
       resources:
         limits:
           memory: ${ANY_SYNC_DAEMONS_MEMORY_LIMIT:-}
+    userns_mode: "host"
     restart: unless-stopped
 
   # any-sync-netcheck
   netcheck:
     image: "ghcr.io/anyproto/any-sync-tools:${ANY_SYNC_TOOLS_VERSION}"
     pull_policy: always
+    userns_mode: "host"
     restart: unless-stopped
     depends_on:
       - any-sync-consensusnode
@@ -267,6 +281,7 @@ services:
   # anytype-cli bootstrap - create bot account on first run
   # anytype-cli_bootstrap:
   #   image: "ghcr.io/anyproto/anytype-cli:${ANYTYPE_CLI_VERSION}"
+  #   userns_mode: "host"
   #   restart: "no"
   #   depends_on:
   #     netcheck:
@@ -297,6 +312,7 @@ services:
   # anytype-cli server
   # anytype-cli:
   #   image: "ghcr.io/anyproto/anytype-cli:${ANYTYPE_CLI_VERSION}"
+  #   userns_mode: "host"
   #   restart: unless-stopped
   #   depends_on:
   #     anytype-cli_bootstrap: