feat: compatibility with docker userns-remap (#1442)

k3d-io · May 29, 2024 · 01d3876 · 01d3876
1 parent 0af7049
commit 01d3876
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/pkg/runtimes/docker/translate.go b/pkg/runtimes/docker/translate.go
@@ -127,6 +127,9 @@ func TranslateNodeToContainer(node *k3d.Node) (*NodeInDocker, error) {
 	// TODO: can we replace this by a reduced set of capabilities?
 	hostConfig.Privileged = true
 
+	// Privileged containers require userns=host when Docker has userns-remap enabled
+	hostConfig.UsernsMode = "host"
+
 	if node.HostPidMode {
 		hostConfig.PidMode = "host"
 	}