Idmapped Mounts

" summary

Introduces idmapped mounts on Linux, a kernel feature that lets bind-mounts apply UID/GID mappings so file ownership can differ per mount point instead of system-wide. Covers the idmapped-mount patchset, concrete use cases (portable home directories, union/merged filesystems, user namespaces in containers, and avoiding expensive chown on large filesystems) and includes a technical look and a demo of the feature's capabilities.

AI-written summary · about

" related talks

• 48mIdmapped MountsChristian Brauner · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 30mUser namespaces with host-isolated UIDs/GIDsStephane Graber, Aleksandr Mikhalitsyn · Linux Plumbers Conference 2023
• 42mWhat's New in the User NamespaceChristian Brauner, Stephane Graber · Linux Security Summit Europe 2022
• 31mIOMMUFD DiscussionJason Gunthorpe · Linux Plumbers Conference 2022
• 01h 03mLinux Namespaces for Fun and IsolationMartin Ertsås · NDC Security 2024
• 43mThe Forefront of the Development for NVDIMM on Linux KernelYasunori Goto, Ruan Shiyang · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 54mUnderstanding user namespacesMichael Kerrisk · foss-north 2019
• 42mSecuring Filesystem Images for Unprivileged ContainersJames Bottomley · Linux Security Summit 2016