Browse Source

simplify uid/gid mapping

main
Nicolas Massé 1 month ago
parent
commit
d2eb6a16fb
  1. 10
      nextcloud/nextcloud-app.container
  2. 10
      nextcloud/nextcloud-collabora.container
  3. 10
      nextcloud/nextcloud-cron.container
  4. 10
      nextcloud/nextcloud-init.container
  5. 10
      nextcloud/nextcloud-nginx.container
  6. 10
      nextcloud/nextcloud-redis.container
  7. 10
      nextcloud/nextcloud-upgrade.container
  8. 10
      postgresql/postgresql-backup.container
  9. 10
      postgresql/postgresql-init.container
  10. 10
      postgresql/postgresql-server.container
  11. 10
      postgresql/postgresql-upgrade.container

10
nextcloud/nextcloud-app.container

@ -21,12 +21,10 @@ User=www-data
Group=www-data Group=www-data
# UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host # UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host
UIDMap=0:1000000:82 UIDMap=0:1000000:65535
UIDMap=82:10008:1 UIDMap=+82:10008:1
UIDMap=83:1000083:65453 GIDMap=0:1000000:65535
GIDMap=0:1000000:82 GIDMap=+82:10000:1
GIDMap=82:10000:1
GIDMap=83:1000083:65453
# Network configuration # Network configuration
Network=host Network=host

10
nextcloud/nextcloud-collabora.container

@ -18,12 +18,10 @@ User=1001
Group=1001 Group=1001
# UID/GID mapping to map the 1001 user inside the container to arbitrary user 10016 / group 10000 on the host # UID/GID mapping to map the 1001 user inside the container to arbitrary user 10016 / group 10000 on the host
UIDMap=0:1000000:1001 UIDMap=0:1000000:65535
UIDMap=1001:10016:1 UIDMap=+1001:10016:1
UIDMap=1002:1001002:64534 GIDMap=0:1000000:65535
GIDMap=0:1000000:1001 GIDMap=+1001:10000:1
GIDMap=1001:10000:1
GIDMap=1002:1001002:64534
# Security # Security
SeccompProfile=/etc/quadlets/nextcloud/collabora-seccomp-profile.json SeccompProfile=/etc/quadlets/nextcloud/collabora-seccomp-profile.json

10
nextcloud/nextcloud-cron.container

@ -18,12 +18,10 @@ User=www-data
Group=www-data Group=www-data
# UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host # UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host
UIDMap=0:1000000:82 UIDMap=0:1000000:65535
UIDMap=82:10008:1 UIDMap=+82:10008:1
UIDMap=83:1000083:65453 GIDMap=0:1000000:65535
GIDMap=0:1000000:82 GIDMap=+82:10000:1
GIDMap=82:10000:1
GIDMap=83:1000083:65453
# Network configuration # Network configuration
Network=host Network=host

10
nextcloud/nextcloud-init.container

@ -22,12 +22,10 @@ User=www-data
Group=www-data Group=www-data
# UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host # UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host
UIDMap=0:1000000:82 UIDMap=0:1000000:65535
UIDMap=82:10008:1 UIDMap=+82:10008:1
UIDMap=83:1000083:65453 GIDMap=0:1000000:65535
GIDMap=0:1000000:82 GIDMap=+82:10000:1
GIDMap=82:10000:1
GIDMap=83:1000083:65453
# Network configuration # Network configuration
Network=host Network=host

10
nextcloud/nextcloud-nginx.container

@ -23,12 +23,10 @@ User=nginx
Group=nginx Group=nginx
# UID/GID mapping to map the nginx (101) user inside the container to arbitrary user 10008 / group 10000 on the host # UID/GID mapping to map the nginx (101) user inside the container to arbitrary user 10008 / group 10000 on the host
UIDMap=0:1000000:101 UIDMap=0:1000000:65535
UIDMap=101:10008:1 UIDMap=+101:10008:1
UIDMap=102:1000102:65434 GIDMap=0:1000000:65535
GIDMap=0:1000000:101 GIDMap=+101:10000:1
GIDMap=101:10000:1
GIDMap=102:1000102:65434
# Volume mounts # Volume mounts
Volume=/var/lib/virtiofs/data/nextcloud:/var/www/html:z Volume=/var/lib/virtiofs/data/nextcloud:/var/www/html:z

10
nextcloud/nextcloud-redis.container

@ -24,12 +24,10 @@ User=redis
Group=redis Group=redis
# UID/GID mapping to map the redis (999) user / redis (1000) group inside the container to arbitrary user 10008 / group 10000 on the host # UID/GID mapping to map the redis (999) user / redis (1000) group inside the container to arbitrary user 10008 / group 10000 on the host
UIDMap=0:1000000:999 UIDMap=0:1000000:65535
UIDMap=999:10008:1 UIDMap=+999:10008:1
UIDMap=1000:1001000:64536 GIDMap=0:1000000:65535
GIDMap=0:1000000:1000 GIDMap=+1000:10000:1
GIDMap=1000:10000:1
GIDMap=1001:1001001:64535
# Environment variables # Environment variables
Environment=REDISCLI_AUTH=${REDIS_HOST_PASSWORD} Environment=REDISCLI_AUTH=${REDIS_HOST_PASSWORD}

10
nextcloud/nextcloud-upgrade.container

@ -22,12 +22,10 @@ User=www-data
Group=www-data Group=www-data
# UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host # UID/GID mapping to map the www-data (82) user inside the container to arbitrary user 10008 / group 10000 on the host
UIDMap=0:1000000:82 UIDMap=0:1000000:65535
UIDMap=82:10008:1 UIDMap=+82:10008:1
UIDMap=83:1000083:65453 GIDMap=0:1000000:65535
GIDMap=0:1000000:82 GIDMap=+82:10000:1
GIDMap=82:10000:1
GIDMap=83:1000083:65453
# Network configuration # Network configuration
Network=host Network=host

10
postgresql/postgresql-backup.container

@ -25,12 +25,10 @@ User=postgres
Group=postgres Group=postgres
# UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host # UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host
UIDMap=0:1000000:70 UIDMap=0:1000000:65535
UIDMap=70:10004:1 UIDMap=+70:10004:1
UIDMap=71:1000071:65465 GIDMap=0:1000000:65535
GIDMap=0:1000000:70 GIDMap=+70:10000:1
GIDMap=70:10000:1
GIDMap=71:1000071:65465
# Avoid issues with built-in volumes being created by root # Avoid issues with built-in volumes being created by root
PodmanArgs=--image-volume=ignore PodmanArgs=--image-volume=ignore

10
postgresql/postgresql-init.container

@ -37,12 +37,10 @@ User=postgres
Group=postgres Group=postgres
# UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host # UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host
UIDMap=0:1000000:70 UIDMap=0:1000000:65535
UIDMap=70:10004:1 UIDMap=+70:10004:1
UIDMap=71:1000071:65465 GIDMap=0:1000000:65535
GIDMap=0:1000000:70 GIDMap=+70:10000:1
GIDMap=70:10000:1
GIDMap=71:1000071:65465
# Avoid issues with built-in volumes being created by root # Avoid issues with built-in volumes being created by root
PodmanArgs=--image-volume=ignore PodmanArgs=--image-volume=ignore

10
postgresql/postgresql-server.container

@ -42,12 +42,10 @@ User=postgres
Group=postgres Group=postgres
# UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host # UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host
UIDMap=0:1000000:70 UIDMap=0:1000000:65535
UIDMap=70:10004:1 UIDMap=+70:10004:1
UIDMap=71:1000071:65465 GIDMap=0:1000000:65535
GIDMap=0:1000000:70 GIDMap=+70:10000:1
GIDMap=70:10000:1
GIDMap=71:1000071:65465
# Avoid issues with built-in volumes being created by root # Avoid issues with built-in volumes being created by root
PodmanArgs=--image-volume=ignore PodmanArgs=--image-volume=ignore

10
postgresql/postgresql-upgrade.container

@ -33,12 +33,10 @@ User=postgres
Group=postgres Group=postgres
# UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host # UID/GID mapping to map the postgres (70) user inside the container to arbitrary user 10004 / group 10000 on the host
UIDMap=0:1000000:70 UIDMap=0:1000000:65535
UIDMap=70:10004:1 UIDMap=+70:10004:1
UIDMap=71:1000071:65465 GIDMap=0:1000000:65535
GIDMap=0:1000000:70 GIDMap=+70:10000:1
GIDMap=70:10000:1
GIDMap=71:1000071:65465
# Avoid issues with built-in volumes being created by root # Avoid issues with built-in volumes being created by root
PodmanArgs=--image-volume=ignore PodmanArgs=--image-volume=ignore

Loading…
Cancel
Save