Migrating Dokuwiki to NS8?

[dnutan (Marc)]

Just a general “For Our Information” note (although quotes are out of context they still provide some useful info):

@davidep

As said many times, fixing the ownership to the correct value is a real challenge in the containers world and for this reason absolute path operations must be avoided.

@davidep

Writing files into container volumes with such absolute paths is dangerous. It bypasses the uid:gid namespace and leads to access issues.

@davidep

Using absolute paths like this bypasses the user namespace applied by Podman: it is a dangerous approach.

@davidep

As always I suggest to avoid writing directly into system absolute paths with some “_data” path components, because it may have ownership and SELinux implications. The safe approach is to use Podman commands, like “podman exec”.

@davidep

When ownership is changed from a foreign user namespace, uid/gid numbers cannot be mapped and fall back to nobody/nogroup.

@davidep

Namespaces are important to understand the rich environment of containers, where service processes run: namespaces(7) - Linux manual page

Additionally:

@davidep

use podman unshare to edit the file with the host’s text editor as written above (Samba5 AD, DNS Nethserver8 - #2 by davidep), to preserve the correct file ownership and context.

man podman unshare