-
Notifications
You must be signed in to change notification settings - Fork 201
Description
We are running a rstudio-server container managed by podman rootless setting and mounted a folder (e.g. /mnt/home/shared) in the host to pass shared data. The users may have different groups priority to get access the data they need. The data in such folder is set mode of 750. For a user A, he is a member of group ga(primary group) and also a member of group gb (secondary group),but he cannot access the data belong to gb in the container (lost the access granted by secondary group). According to the suggest in podman repository ([https://github.com/containers/podman/issues/10166]), I have tried to set the flag --group-add keep-groups but it still not work.
Here is the script we use to init a rstudio-server container:
podman --runtime crun --runroot $tmp --cgroup-manager=cgroupfs run --network=slirp4netns --group-add keep-groups --rm -ti -e DISABLE_AUTH=true -p $free_port:8787 -v $r_home_dir:/root -v $share_path:/root/sharedata rocker/rstudio
Is there anyway to make the user keep their access permission from all groups?