ceamac e64f885c2e Default -r's user/group to the image's own declared user ...

When --user isn't given, run the sandboxed process as whatever user the
image's own config.User declares (already parsed into OciImageConfig::user/
group), instead of always defaulting to root. An explicit --user/--group on
the command line still takes precedence.

read_oci_image_config() is now called unconditionally in run_container()
(it was previously gated behind "no command given") and shared for both the
default command and the default user/group, rather than growing another
special-case guard.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Gv3s5jckJKzh6JkMoi2Akz

2026-08-21 07:28:14 +00:00

src

Default -r's user/group to the image's own declared user

2026-08-21 07:28:14 +00:00

subprojects

Initial commit: OCI image mounting via containers-storage

2026-08-10 08:12:50 +00:00

tests

Add -r/--run and -c/--cleanup, fix nsenter under root

2026-08-17 07:44:24 +00:00

.gitignore

Ignore the local images/ test directory

2026-08-20 15:49:57 +00:00

add-license.sh

Initial commit: OCI image mounting via containers-storage

2026-08-10 08:12:50 +00:00

CLAUDE.md

Default -r's user/group to the image's own declared user

2026-08-21 07:28:14 +00:00

COPYING

Initial commit: OCI image mounting via containers-storage

2026-08-10 08:12:50 +00:00

copyright-header

Initial commit: OCI image mounting via containers-storage

2026-08-10 08:12:50 +00:00

meson_options.txt

Initial commit: OCI image mounting via containers-storage

2026-08-10 08:12:50 +00:00

meson.build

Add --user/--group to run as a different uid/gid as root

2026-08-21 07:06:13 +00:00

S

Description

Run a docker image with bubblewrap on low end devices

772 KiB

Languages

C++ 97.9%

Python 1%

Meson 0.7%

C 0.3%