Linux has had user namespaces for a while, and user namespaces solve this problem.
Yes, they have their share of bugs (I've found quite a few of them), but they're far better than doing containerization with funny cgroup games and crossed fingers (i.e. what Docker does now).
This is coming to Docker. libcontainer is getting support for user namespaces[1] and the Docker engine will have a static configurable root map once the changes land.
3 comments
[ 5.2 ms ] story [ 14.1 ms ] threadLinux has had user namespaces for a while, and user namespaces solve this problem.
Yes, they have their share of bugs (I've found quite a few of them), but they're far better than doing containerization with funny cgroup games and crossed fingers (i.e. what Docker does now).
[1] https://github.com/docker/libcontainer/pull/23