How to use userns=auto in API POST?

[lukasmrtvy]

Hey, I have troubles using nsmode=auto for API POST. Its working correctly via Podman CLI:

[root@ip-10-2-4-104 core]# cat /etc/subuid
containers:200000:6553600
[root@ip-10-2-4-104 core]# cat /etc/subgid
containers:200000:6553600

[root@ip-10-2-4-104 core]# podman  run --userns=auto --rm -it alpine
/ # cat /proc/self/uid_map
         0     202048       1024

But nsmode auto is not respected in POST request:

[root@ip-10-2-4-104 core]# podman start -a $(curl -s --unix-socket /run/podman/podman.sock -X POST -H "Content-Type: application/json" -d '{"Image":"ubuntu","userns":{"nsmode":"auto"},"entrypoint":["/bin/sh","-c"],"command":["cat /proc/self/uid_map"]}' http://d/v4.1.1/libpod/containers/create | jq -r .Id)
         0          0 4294967295

Do I need to also define same ranges from /etc/subgid and /etc/subgid in POST request? I noticed that /container/create endpoint supports also idmappings object.

Thanks

[rhatdan]

@giuseppe PTAL

[giuseppe]

you'd need to specify something like the following:

curl -s --unix-socket /run/user/1000/podman/podman.sock -X POST -H "Content-Type: application/json" -d '{"Image":"alpine","idMappings": {"UIDMap": [{"container_id": 0, "host_id": 10000, "size": 100}], "GIDMap": [{"container_id": 0, "host_id": 10000, "size": 100}]}, "userns":{"nsmode":"private"},"entrypoint":["/bin/sh","-c"],"command":["cat /proc/self/uid_map"]}' http://d/v4.1.1/libpod/containers/create