Live data from Hacker News

LXD 5.0 LTS has been released

discuss.linuxcontainers.org

1–4 of 4 posts

Re: LXD 5.0 LTS has been released

#2
Any plans to support rootless operation? That's my favorite feature of podman that LXD currently lacks. I believe the underlying LXC tooling already supports managing containers as a non-root user. Currently LXD requires either sudo or membership in the "LXD" group, which is essentially equivalent to having root privileges.

Re: LXD 5.0 LTS has been released

#3
post #2

Any plans to support rootless operation? That's my favorite feature of podman that LXD currently lacks. I believe the underlying LXC tooling already supports managing containers as a non-root user. Currently LXD requires either sudo or membership in the "LXD" group, which is essentially equivalent to having root privileges.

I believe that RBAC may be possible, though I've never tried it. However, I have used TLS client certificate to get access equivalent to LXD group as a normal user. I've tried it using lxc command and python script.

Re: LXD 5.0 LTS has been released

#4
post #2

Any plans to support rootless operation? That's my favorite feature of podman that LXD currently lacks. I believe the underlying LXC tooling already supports managing containers as a non-root user. Currently LXD requires either sudo or membership in the "LXD" group, which is essentially equivalent to having root privileges.

LXD now has a lxd-user process which allows for automated restricted project generation providing a safe LXD environnement for non-admin users.

https://youtu.be/6O0q3rSWr8A