UID AND GID SHIFTING FOR CONTAINERS IN USER NAMESPACES

摘要

A request to access an image stored by a host operating system (OS) maybe received from a process running in a container. The container may run a namespace including a plurality of namespace user identifiers (UIDs). A host UID corresponding to the namespace UID of the process may be synchronized with a host UID of an owner of the image based on configuration data of the namespace. In this way, multiple containers running namespaces may access a read only image file without requiring the image file to be copied for each container, thus preserving memory resources.