Does rootless Podman share one user namespace across containers in a pod?
0 reputation · 13 Apr 2024, 16:25 UTC
Goal: determine whether rootless Podman containers started in the same pod receive separate user namespaces or share a single namespace, because UID mapping controls file ownership and access permissions.
Podman's rootless mode depends on user namespaces, but documentation does not consistently specify whether each container in a pod receives its own UID range or whether the pod shares one mapping. Behavior may vary by Podman release and by launch context, such as a systemd user session versus a plain shell.
Does rootless Podman allocate a distinct user namespace for every container in a pod by default? When namespaces are shared, how are overlapping UID mappings resolved? Is this behavior consistent across recent Podman releases?