{"action":"created","issue":{"url":"https://api.github.com/repos/lxc/lxc/issues/1160","repository_url":"https://api.github.com/repos/lxc/lxc","labels_url":"https://api.github.com/repos/lxc/lxc/issues/1160/labels{/name}","comments_url":"https://api.github.com/repos/lxc/lxc/issues/1160/comments","events_url":"https://api.github.com/repos/lxc/lxc/issues/1160/events","html_url":"https://github.com/lxc/lxc/issues/1160","id":173752338,"number":1160,"title":"Facing issue with snapshot on btrfs backed volume","user":{"login":"bharad1988","id":19284613,"avatar_url":"https://avatars.githubusercontent.com/u/19284613?v=3","gravatar_id":"","url":"https://api.github.com/users/bharad1988","html_url":"https://github.com/bharad1988","followers_url":"https://api.github.com/users/bharad1988/followers","following_url":"https://api.github.com/users/bharad1988/following{/other_user}","gists_url":"https://api.github.com/users/bharad1988/gists{/gist_id}","starred_url":"https://api.github.com/users/bharad1988/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bharad1988/subscriptions","organizations_url":"https://api.github.com/users/bharad1988/orgs","repos_url":"https://api.github.com/users/bharad1988/repos","events_url":"https://api.github.com/users/bharad1988/events{/privacy}","received_events_url":"https://api.github.com/users/bharad1988/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":14,"created_at":"2016-08-29T11:21:37Z","updated_at":"2016-08-30T16:15:41Z","closed_at":null,"body":"I have been using lxc-go libraries to create container and take a snapshot. Working on un-previleged containers as a non root user.\r\n\r\nWhen i take a snapshot, i am seeing the following error.\r\nnewgidmap: gid range [100000-100001) -> [200000-200001) not allowed\r\nerror mapping child\r\n\r\nhere is my config:\r\nlxc.id_map = u 0 100000 65536\r\nlxc.id_map = g 0 100000 65536\r\n\r\n\r\nfound this issue similar to id - #579\r\nAlso , went through this mail chain.\r\nhttps://www.mail-archive.com/lxc-users@lists.linuxcontainers.org/msg03197.html\r\n\r\nCan i get some help with any workarounds ?\r\n\r\nThanks\r\nAj\r\n"},"comment":{"url":"https://api.github.com/repos/lxc/lxc/issues/comments/243494059","html_url":"https://github.com/lxc/lxc/issues/1160#issuecomment-243494059","issue_url":"https://api.github.com/repos/lxc/lxc/issues/1160","id":243494059,"user":{"login":"bharad1988","id":19284613,"avatar_url":"https://avatars.githubusercontent.com/u/19284613?v=3","gravatar_id":"","url":"https://api.github.com/users/bharad1988","html_url":"https://github.com/bharad1988","followers_url":"https://api.github.com/users/bharad1988/followers","following_url":"https://api.github.com/users/bharad1988/following{/other_user}","gists_url":"https://api.github.com/users/bharad1988/gists{/gist_id}","starred_url":"https://api.github.com/users/bharad1988/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bharad1988/subscriptions","organizations_url":"https://api.github.com/users/bharad1988/orgs","repos_url":"https://api.github.com/users/bharad1988/repos","events_url":"https://api.github.com/users/bharad1988/events{/privacy}","received_events_url":"https://api.github.com/users/bharad1988/received_events","type":"User","site_admin":false},"created_at":"2016-08-30T16:15:40Z","updated_at":"2016-08-30T16:15:40Z","body":"# Distribution configuration\r\nlxc.include = /usr/share/lxc/config/ubuntu.common.conf\r\nlxc.include = /usr/share/lxc/config/ubuntu.userns.conf\r\nlxc.arch = x86_64\r\n\r\n# Container specific configuration\r\nlxc.id_map = u 0 100000 65536\r\nlxc.id_map = g 0 100000 65536\r\nlxc.logfile = /home/ajay/containers/lxc.log\r\nlxc.rootfs = /home/ajay/btrfsStore/testrubik5/rootfs\r\nlxc.rootfs.backend = btrfs\r\nlxc.utsname = testrubik5\r\n\r\n# Network configuration\r\nlxc.network.type = veth\r\nlxc.network.link = lxcbr0\r\nlxc.network.flags = up\r\nlxc.network.hwaddr = 00:16:3e:ef:fa:2a\r\n\r\n-----------------------------------------------------------\r\nBtw,  I had set the subgid \r\nlxc.id_map = g 0 100000 65536\r\n\r\nRight now, I have moved on to use root user ( instead of a non-root user ) to create un-privileged containers. I assume it will be safe to create them with root user. Please let me know any specific things i have to take care of to make them fully secure. \r\n\r\n>  2) non-root user specifying the backend device as btrfs ( Snapshot was using the compression feature of btrfs very efficiently but threw the error message although i was able to start )\r\n\r\nNot bothered to much with this issue as long as btrfs would be safe to continue as a root user. Just curious to understand this case.\r\n\r\nThanks brauner..."}}
{"actor":{"display_login":"bharad1988"}}