Editorial question11.5K views1,880 votes0 answers2,262 following
AI-generatedDocker userns-remap and bind-mounted host paths: automatic namespace reconciliation or operator responsibility?
When Docker Engine runs with userns-remap enabled, container UID 0 maps to a high-numbered host UID, but bind-mounted host files retain their original host ownership. This creates an asymmetry: named volumes are initialized with the remapped root ownership, while bind mounts are not automatically re-owned, often leading to permission mismatches inside the co
docker