►
From YouTube: The Level Up Hour (E36): Podman and subordinate user IDs
Description
Let's talk about how rootless containers work. Both Podman and Red Hat OpenShift default to using rootless containers. This can cause problems when scouring the internet for inputs and we often end up with "root required" containers. But why can’t you use any container image that works on normal Podman in rootless mode? Why do the exact UIDs and GIDs in use matter? Join this episode to learn more about Podman and subordinate user IDs.
Learn more:
https://www.redhat.com/sysadmin/rootless-podman
Follow us:
Langdon White https://twitter.com/1angdon
Chris Short https://twitter.com/ChrisShort
What is the Level Up Hour?
Every Wednesday at 9am ET we stream live demos on how Red Hat Enterprise Linux (RHEL) users and admins can benefit their organizations and improve their careers by learning how to use containers, Kubernetes, and Red Hat OpenShift.
Learn more at:
https://red.ht/leveluphour
http://red.ht/3ayHlHI
How to participate in the The Level Up Hour:
Watch on YouTube every Wednesday at 9amET
Chat with us on Discord https://discord.gg/5VMVGJt
Check out our GitHub repo https://github.com/level-up-hour/
About OpenShift:
Red Hat OpenShift is an open source container application platform based on the Kubernetes container orchestrator for enterprise application development and deployment.
https://www.openshift.com/
https://github.com/openshift/
#RedHat #OpenShift #tluh
A
A
B
C
B
A
B
A
B
It
would
not
surprise
me,
although
I
am
unaware
of
its
existence
entirely,
but
it
would
not
surprise
me
if
there
is
not
some
sort
of
fan
page
that
is
just
all
of
the
t-shirts
and
like
where
to
acquire
them
and
they're,
mostly
pretty
good.
So
it's
worth
it's
worth,
taking
a
look
but
yeah,
so
we
have
yeah
we're
going
to
talk
about
sub
sub
goods,
sub
guid
sub
ids.
I
don't
know
how
you
actually
say
it.
You
know
it's
one
of
those.
You
know
you
could.
B
C
B
A
B
Oh
there
you
go
see
finding
the
definition
so
yeah
it
was
just.
It
was
one
of
those
things
where
it
was
a
serious
throwback
to
when
I
was
like
early
college,
where
you
know,
I
knew
a
lot
of
words
primarily
because
I
read
a
lot,
but
if
you
read
a
lot
you
don't
always
know
how
to
pronounce
them.
So
like
k
versus
key
q-u-a-y
really
threw
me
both
that
I
originally
thought
it
was
pronounced
quay
because
it
looks
like
it
is.
B
B
B
B
We
yeah
it's.
It's
like.
I
was
it's
like
the
third
rail
except
you
know.
I
heard
a
really
good
quote
about
that.
Actually
is
like
you
know,
you
often
will
hear
people
reference.
You
know,
don't
do
that
thing
because
it's
like
touching
the
third
rail-
and
I
also,
but
I
heard
kind
of
a
counter
to
that
which
is
like
yeah,
but
that's
also
where
all
the
power
is,
and
so
sometimes
it's
that's.
A
C
B
B
My
wife
remembers
like
every
little
detail
about
every
episode
and
my
son's
enjoying
it
so
we're
we
keep
watching
it,
but
yeah
so
attribution,
but
I
thought
it
was
a
really
good
line,
but
I'm
a
big
fan
of
sorkin
in
general,
although
I
think
by
that
point
he
was
not
actually
writing
all
right,
so
slides
yeah.
This
is
going
to
be
a
heavy
tangent
day.
I
can
feel
it
already
so
the
level
of
power,
that's
what
we're
here
for
so
a
little
bit
about
what
we
do
here.
B
We
talk
about.
Generally
speaking,
we
talk
about
containers
and
kind
of
things
that
are
related
to
containers,
as
well
as,
like
things
like
orchestration
of
containers,
primarily
with
a
focus
on.
This
is
why
you
should
get
into
containers
they're
super
useful
for
basically
anything
you
do
in
technology,
and
you
know
they're
they're,
basically,
a
nice
self-contained
little
unit
to
do
something
in
it
was
actually
really
funny.
B
I've
dropped
the
ball
somehow,
but
it's
suffice
to
say.
I
use
containers
for
everything
and
recommend
that
you
should
too
so
a
little
bit
more
about
the
show.
You
could
find
myself
on
twitter
langdon
with
a
one
you
can
find
chris
with
chris
short,
with
two
s's
right
there
in
the
middle,
and
you
can
chat
with
us
on
our
discord.
It's
been
super
quiet
lately,
but
it
it
was
pretty.
C
B
B
B
I
don't
know
about
that,
one.
It
was
funny
I
was
actually.
I
saw
an
article
the
other
day
about
how
some
like
coffee,
not
coffee,
gas,
jason,
jane,
was
kind
of
coming
into
the
south
from
like
texas
or
something
I
want
to
say
it
was
called
like
beaver
or
something
it
was
something
like
some
small
animal.
I
thought
it
was
beaver,
but
I
was
like
I.
I
went
and
read
the
article
because
I
was
like
I
don't
know.
I
don't
even
vaguely
understand
what
this
thing
is
about
from
reading.
B
Because
I
never
heard
of
this
particular
convenience
store,
which
is
funny
just
because
you
know
I
know
wawa,
even
though
we
don't
have
those
here,
you
know
and
what
was
the
other
one,
the
other
big
one
there's
another
one
that
people
like
swear
by
and
we
have,
but
we
have
like
bucky
bucky's,
that's
what
it
was
it's.
It's
got.
Always
a
logo
yeah,
that's
what
it
is.
Yeah.
B
Just
because
it's
funny-
and
I
think
that's
the
last
of
our
slides
before
yeah
before
we
get
to
the
points
so
we're
going
to
stop
there.
So
today
we
are
going
to
talk
about
user
ids,
okay,
so
and
kind
of
to
start
to
kind
of
head
back
to
the
basics.
A
little
bit,
as
many
of
you
may
or
may
not
know,
one
of
the
defining
kind
of
characteristics
of
linux
and
by
extension,
unix,
is
that
it's
kind
of
a
loose
term,
but,
like
everything,
is
a
file.
B
Okay
and
everything.
Everything
everything
is
a
file.
So,
like
a
socket's,
a
file,
you
know
you
know,
your
usb
drive
is
file.
You
know
everything's
a
file
and
what
that
does
is
simplifies
the
operating
system
and
how
it
works
in
a
lot
of
different
ways.
I'm
not
sure
what
originally
kind
of
caused
the
designers
or
whatever
and
of
unix,
to
kind
of
latch
onto
that,
but
everything's
a
file.
This
is
majorly
distinct
from
windows
where
different
types
have
like
or
different
things
have
very
different
types.
B
B
B
However,
different
users
obviously
can
only
access
different
files,
and
then
you
have
kind
of
three
major
categories
of
file
security
right.
You
have.
The
ownership
is
by
user
by
group
and
by
in
what's
called
world,
and
so
if
a
file
has
set
is
set
correctly,
only
yourself
can
see
it.
You
know
only
your
group
can
see
it,
and
then
a
group,
basically
just
by
way
of
kind
of
finishing
the
explanation
of
group,
is
just
exactly
what
it
sounds
like
a
group
of
users.
C
B
B
So
yeah
so
groups
they
they
really
in
some
ways
feel
a
little
bit
like
an
afterthought.
But
I
you
know
it's
kind
of
one
of
those
things
where
we
see
in
in
the
software
world.
You
know
we're
in
the
computer
world
kind
of
more
broadly.
Sometimes
it's
a
little
hard
to
tell
whether
something
is
there
by
design
or
it
just
kind
of
evolved.
That
way,
and
so
you
know
and
and
because
the
industry
has
been
changing
so
fast,
it
can
be,
it
makes
it
extra
difficult.
B
So
particularly,
you
know,
as
when
you're
kind
of
administering
your
your
own
user
by
essentially
just
running
bash
again,
but
if
you
are
in
most
desktop
environments,
so
like
no
mercade
or
whatever,
this
doesn't
work.
So,
even
if
I
am
in
a
terminal
window
and
I
run
bash,
it
will
not
reset
my
groups
to
the
new
set,
so
this
does
sourcing
the
profile
work.
I
don't
think
that
does
not
in.
A
B
Exactly
so,
that's
that's
exactly
it,
and
so
it's
a
real
pain
in
the
butt,
especially
and
what
happened
to
me,
the
other
day
was
I
was
setting
up.
I
can't
remember
what
I
was
setting
up
now,
but
I
was
using
ansible
to
put
a
user
in
a
group
and
I
did
it
wrong
and
I
made
it
their
only
group,
so
I
took
away
their
other
groups
instead
of.
B
User
was
who
I
was
logged
in
as
and
because
I
was
logged
in
as
that
user.
It
wasn't
changing
the
groups
and
so
yeah,
so
I
ended
up
borking
the
user
and
having
to
like
rebuild
it,
and
so
I
I
was
angry
and
complaining
to
the
rest
of
the
team
about.
Why
are
groups
such
a
pain
in
the
butt,
so
long
story,
short
yeah
and
so
rex
roof
makes
the
point.
If
I
change
my
users
groups,
I
just
reboot.
C
A
A
B
Yes
to
jp
dance
point,
never
reboot.
This
isn't
windows,
you
know
which
I
don't
know
like
some
of
the
gnome
choices
over
the
past
recent
years.
I
find
very
odd
in
this
regard,
because
they've
actually
set
it
up
so
that
the
expectation
is
that
you
reboot
every
time
you
do
any
sort
of
upgrade,
which
is
just
kind
of
like
the
opposite
of
what
you
expect
from
a
linux
kind
of
distribution.
B
So
long
story
short
there.
You
know
you
know
I
I
didn't
want
to
reboot,
because
I
had
you
know
a
million
windows
open
and
I
was
kind
of
in
the
middle
of
something,
and
so
but
I
needed
to
be
in
this
group
for
whatever
was
to
happen
and
then
I
ended
up
actually
borking
the
user.
It
was
this
whole
thing,
so
suffice
to
say,
as
of
memorial
day,
my
primary
you
know
my
as
they
refer
to
in
the
phone
world
my
daily
driver.
B
It
has
been
upgraded
to
fedora
34,
because
I
ended
up
just
wiping
the
entire
machine.
Well,
I
somehow
it
was
all
about
virtualization,
so
it
was
all
about
and
I
somehow
broke
it
badly,
wow
it.
It
was
badly
enough
that
my
kind
of
quick
and
dirty
fixes
weren't
sufficient,
so
I
was
just
like
whatever
and
I
had
to
do
the
upgrade
anyway.
So
you
know
it
was.
I
was
just
like
yeah
I'll.
B
Yeah,
so
I'm
always
on
the
fence.
Surprisingly:
well,
oh
yeah,
so
it
totally
does
and
I
highly
recommend
it.
The
only
reason
I
don't
usually
do
upgrades
is
because
I'm
I'm
very
close
to
the
desktop
experience
and
all
that
kind
of
stuff
like
like
I'm
on
the
the
working
group
for
it
in
fedora
land.
You
know
I
I
try
to
push
for
developer
and
sysadmin
stuff.
B
B
C
B
Yeah
exactly
all
right
so
groups,
users,
own
files
and
so
to
kind
of
continue.
On
that
same
vein,
the
nobody
user
was
introduced
quite
a
number
of
years
ago.
Now
it
is
actually
an
official
designation
in
actually
kind
of
by
way
extension.
There
is
this.
I
always
get
the
letters
wrong.
I
think
it's
the
lsf,
the
linux,
no
lfs,
the
linux.
B
A
B
A
B
A
B
A
B
B
Oh
interesting
yeah
and
I
bet
that
is
different
depending
on
what
operating
or
what
flavor
of
linux
you're
on.
Oh
because
this
is
where
some
of
the
distinctions
come
in,
which
is
like
one
of
the
biggest
challenges
between
the
different
distributions
of
linux
is
actually
significantly
more
about
muscle
memory
than
it
is
about
actual
differences,
and
so
knowing
where
a
file
is,
is
one
of
the
things
that
your
muscle
memory
tells
you
and
then
the
other
one
is
kind
of
like
how
do
you
install
or
update
software?
B
You
know
on
the
debian
flavors
right,
you
use
something
like
apt-get,
you
know,
and
on
the
rel
fedora,
whenever
you
use
something
like
yum
or
dnf,
and
why
you
know
why
the
the
differences
are
there.
A
lot
of
the
time
is
just
because
you
you're
used
to
one
or
the
other,
but
so
there's
this
nobody,
nobody
user
and
the
original
idea
behind
it
was
that
you're.
So
you
have
what
I
refer
to
in
linux,
land
and
formerly
unix
land-
I
usually
pronounce
it
as
daemon.
B
But
technically
speaking,
if
you
read
the
like
letters,
it's
actually
demon.
It's,
I
think,
a
little
bit
of
a
joke,
but
the
idea
is
that,
basically
things
that
are
running
in
the
background
or
things
that
are
running
all
the
time
that
you
you
know,
don't
interact
with
you're
not
attached
to
or
whatever.
So
the
idea
was
that
those
things
could
run
as
this,
nobody
user.
B
There
are
still
some
daemons
that
run
as
nobody.
The
example
in
the
articles
I
was
reading
about
were
nfs,
for
example,
but
they're
getting
they're
getting
less
and
less
common.
Because
of
the
problem
of
you
know,
if
you,
if
something
is
owned
by
nobody,
then
anybody
anyone
logged
in
as
nobody
can,
you
know,
get
to
it
yeah.
You
know
you
can't
log
into
it
as
a
human,
but
if
you
compromise
the
nfs
bridge
for
example,
then
you
could
access.
You
know
some
other
thing
that
is
owned
by
nobody.
B
No,
so
all
right,
long
story
short
for
that
when
we
talk
about
it
in
terms
of
containers,
the
reason
I
bring
up.
Nobody
is
because,
in
a
container,
if
you
don't
have
privileges
on
the
host
system
files
that
you
have
bind
mounted
into
the
container
the
way
it
does
that,
without
you
know,
kind
of
breaking
everything
in
linux
is
by
assigning
the
ownership
of
those
files
to
nobody.
A
B
B
Interesting
yeah,
so,
like
I
said
I
just
saw
in
the
thing
I
was
reading,
was
the
example
was
nfs.
I
didn't
look
too
hard
into
other
ones.
I
mean,
I
know,
there's
definitely
a
few.
I
remember
seeing
it
around.
I
just
couldn't
remember
what
all
they
were
off
the
top
my
head.
So,
let's
see
sorry
all
right.
So,
as
I
said,
I
rebuilt
my
machine,
so
some
of
the
settings
are
new
and
special.
B
B
B
But
I
am
not
using
weyland,
primarily
weirdly
enough.
My
my
primary
use
case
for
not
using
weyland
is
because
I
like
clipboard
history
and
it
is
still
not
built
into
gnome,
even
though
I
filed
a
bug
about
this
really
yeah
and
there,
but
there
is
an
extension
for
gnome
that
will
do
it
and
supposedly
it
actually
works,
and
this
is
something
I
was
gonna
experiment
with
it's
supposedly
the
one
I
have
found
recently
works
actually
with
weyland.
A
B
B
Yeah
whatever
but
yeah
synergy,
that's
it
so
synergy
last.
I
checked
also
didn't
work
in
wayland
and
I
was
using
it
a
ton,
but
I
am
not
using
it
very
much
anymore,
so
I
may
that
may
be
a
reason
to
stick
with
it.
So,
okay,
so
what
I
did
here
was
I
mounted
a
directory
into
this
container
that
should
obviously
have
a
bunch
of
privileged
stuff
and
a
bunch
of
stuff.
B
Nobody
nobody's
so
let
me
just
see
so
actually,
let's
use
pseudoers
here
right
or
pseudo
conf
right,
and
so
that's
scary
right
exactly
so.
If
I
do
tester
and
then
sudo
com
and
I
get
permission
denied,
so
that's
cool
right
so
currently
right
and
you
can
see
in
my
my
prompt
but
just
in
case
right-
I
am
doing
I
do.
Who
am
I
I
am
root
inside
the
container.
I
do
an
id,
that's
how
I'd
find
out
what
my
uid
is
and
my
do
gui.
B
B
If
you
look
into
c
groups
at
all,
we
talked
about
this
bit
on
the
show
with
dan
walsh,
whatever
some
weeks
ago
and
basically
that
that
root
power
being
tied
to
the
number
has
resulted
in
things
like
providing
capabilities
or
what
are
called
linux
capabilities
or
sorry
kernel
capabilities.
I
guess
made
them
a
little
weird,
because
there's
a
lot
of
things
that
just
check
for
that
number
and
then
allow
the
operation,
and
if
you
have
that
id
number,
then
you
can
do
it,
but
so
this
has
caused.
B
Obviously,
as
you
might
imagine,
some
problems
where
you
only
want
to
give
the
user
certain
capabilities,
but
not
others,
but
they
also
happen
to
have
uid
0.,
so
long
story
short
there,
the
the
point
being
that
this
root
thing
is
also
a
little
weird
kind
of
like
this.
Nobody
user-
and
this
goes
back
to
computers-
been
around
for
a
long
time
now
and
they've
evolved
a
lot
as
they've
gone,
so
you've
seen
a
little
bit
of
evolution
in
this
root
user.
That
was
not
accounted
for
in
the
original
design
in
a
sense.
B
So
yes,
so
my
point
in
the
sense
to
wsl
corsair,
maybe
is
you
know
this
route
is
not
the
same
as
the
external
route
and
we
have
another
cool
little
command,
which
will
show
that
in
a
second
but
long
story
short.
What
I
wanted
to
show
off
was
that
if
I
try
to
read
this
file,
I
get
a
permission
denied,
even
though
I
am
root
user
now.
This
is
where
it
annoys
me
and
where
I'm
going
to
ask
some
people
on
twitter
to
explain
this
to
me.
C
B
To
see
just
to
kind
of
show
you
what
I
was
doing
so
if
you
do
pseudo
and
minus
you,
you
can
provide
a
user
and
I
can
let's
say,
make
a
directory
because
I
thought
maybe
it
was
excuse
me
god.
So
if
you
noticed
when
I
was
doing
this
above
here
right,
it
was
under
this
tester.
So
I
thought,
maybe
you
know.
B
B
Yep
there
we
go
there,
we
go
so
so
I'm
just
gonna.
Let's
call
it
that
and
type
in
my
password
and
then
we're
gonna,
say
temp
and,
as
you
can
see,
everybody
has
read
access
or
sorry,
not
everybody,
but
so
I
have
read
and
write
access.
My
group
has
read
only
access
and
the
world
has
read
only
access,
so
we're
going
to
take
those
permissions
away
or
most
of
them
by
doing
zero.
Six
zero
zero.
So
this
is
an
octal
set.
B
A
B
B
C
B
A
B
C
B
B
All
right-
and
so
let's
just
do
the
ls
again
all
right
and
then
all
right,
so
we
have
that
down
there
and
then
so.
This
is
where
it's
kind
of
interesting.
So
I
did
this,
even
though
I
did
a
minus.
U
as
nobody,
it
actually
created
it
as
me,
which
I
thought
was
odd,
but
you
may
have
to
do
with
substitutions.
A
B
B
C
C
B
B
B
C
B
That's
a
lot
of
zeros
oops.
I
do
that
all
the
time.
Okay.
Now,
if
we
do
temp,
we
should
see
neuter
here.
No
one
has
permission
on
it.
It
is
a
directory
and
we
have
execute
right
so
on
a
directory.
You
need
execute
permission
to
be
able
to
go
into
it,
yay
all
right.
So
now,
let's
do
our
command
that
took
us
like
87,
tries
rounding
exactly
and
then
we're
gonna
make
it
a
new
number
just
to
make
sure
we
don't
screw
it
up
all
right.
So
now,
in
theory,.
B
All
right
so
there's
a
file
there.
It
is
got
a
lot
of
readership,
so
we're
gonna,
we're
gonna.
Take
that
away
just
in
case,
even
though
we
shouldn't
be
able
to
get
there
at
all
so
zero
six
zero
zero
on
oops.
What
do
we
call
it
of
t-o-u?
Oh
and
tab
completion
doesn't
work
right
because
I
don't
have
execute
so
I
ls
it
again.
B
B
I
don't
understand
it's
not
supposed
to
work,
so
I
need
to
ask
the
internet,
because
I
don't
like,
like
the
whole,
like
that
whole
story
right
was
about
using
the
nobody
user
inside
the
container
makes
it
so
that
we
can't
access
it
from
inside
the
container
using
root
or
any
other
user.
But
that's
not
how
it
works
on
the
host
system,
right,
which
I
was
like,
wait.
What
so.
A
B
Don't
you
swear
right
like
what's
going
on
here
right
and
so
this,
but
you
know
kind
of
what
we're
talking
about
here.
Right
is
the
rootless,
hot
man
thing.
So,
let's
run
this
thing.
Actually
let
me
throw
a
dash,
oh
no.
I
do
have
one
so
we're
gonna
run
this
one
with
sudo.
So
as
root.
So
oh
shoot.
Sorry,
I
forgot,
I
don't
have
it
downloaded.
B
Container
build
yeah
exactly
it's
not
even
that
it's
just
pull
all
right
so
now
in
tester
should
be
the
xc
etsy
directory.
So
we'll
test
der
and
just
in
case
we'll
throw
this.
So
we
don't
get
a
huge
wash
of
error
messages,
but
so
the
file
we
were
mutzen
with
before.
So,
if
you
notice
it's
now
owned
by
root
and
not
by
nobody.
B
Right
sudo.conf
right,
so
that
seems
fine,
okay
as
expected,
so
so
you
can
run
it
as
root
and
you
and
then
all
the
file
permissions
are
set
for
basically
root
ownership
and
I
should
be
able
to
actually
modify
those
files.
Is
there
something?
Actually,
I
could
just
touch
something,
and
that
would
be
enough
for
the
test
just
to
oh
wait
a
minute,
so
I'm
running
it
as
root
and
I
have
the
directory.
But
I
don't
know
if
I
have
directory
permissions
or
if
I
just
have
file
permissions.
B
C
B
Yeah
and
I
cannot
write
it-
I
don't
know
if
you
can
see
that
at
the
bottom
of
the
screen,
but
I
get
an
error,
so
I'm
going
to
exit
out
of
that.
So
I
can't
actually
modify
any
of
these
files,
but
I
can
read
them,
and
this
is
where
I
start
using
like
colon
z,
which
will
do
the
the
mounting
basically
it'll
match
up
the
the
user
ownership
so
yeah.
So
it's
all
very
weird.
It's
all
linux
madness.
Exactly.
A
B
A
B
B
A
B
Bunch
of
different
things
interacting
there
right,
but
yes,
I
don't
know
why
this
didn't
occurred
to
me
earlier,
but
se
linux.
So
while
I
have
so,
as
you
may
or
may
not
know,
we
talked
about
this
on
the
show
with
dan
se.
Linux
is
kind
of
like
an
add-on
security
layer
onto
linux
right.
So
this
is
why,
for
example,
I
think
does
ubuntu
ubuntu
still
doesn't
have
sc
linux
right.
C
B
No
so
ubuntu,
for
example,
doesn't
have
sd
linux
because
it
can,
because
you
know
it's
it's
an
add-on.
They
have
a
different
tool
that
I
think
is
called
app
armor
that
does
yeah.
You
know
same
concept
different
way
right,
so
it's
an
add-on
which
is
then
applying
a
secondary
level
of
security
onto
our
file
system
and
when
I
do
set
enforce
zero.
C
B
B
I
went
to
write
just
looking
to
see
if
I
can
see
it
in
here
quickly.
So
in
theory
in
here
there
is
a
an
error
message
that
says:
oh
we
didn't
let
you
edit
this
file
because
you
are
an
idiot
and
you
shouldn't
have
tried
to
modify
it.
I
think
it's
probably
nicer
than
that,
but
you
know
you
get
the
impression,
that's
what
they
really
mean
so
actually
now
I'm
curious
this.
A
B
A
B
B
A
B
B
A
A
A
A
B
Well,
the
thing
is,
I
want
to
show.
I
wanted
to
see
if
we
could
actually
see
the
error
in
real
time
when
we
tried
to
do
it
right
so
that
you
know
there's
not
a
lot
of.
I
didn't
have
a
lot
of
choices
there.
I
could
go
horizontal,
maybe
that
would
be
easier,
but
this
should
work.
Let's
see
what
happens.
B
C
A
B
B
Oh,
that's
interesting,
I
don't.
Actually
I
get
the
right
on
the
append.
I
immediately
get
the
error
and
I
don't
get
the
error
when
I
try
to
actually
write
it,
which
is
weird
but
whatever
that's
just
how
vi
works.
It's
not
related
to
what
we're
talking
about,
but,
as
you
can
see,
it
was
blocked
by
se
linux
because
we
tried
to
access
it
and
we
do
not
have
rights
on
that.
B
C
B
B
C
B
B
Find
mount
thing
I
should
have
done
mnt
and
then
I
would
have
been
able
to
type
it
a
little
bit
better,
so
we're
going
to
mount
that
into
tester,
which
should
give
us
access
to
it.
We're
going
to
use
the
colon
z
to
tell
it
to
re-label.
Oh
shoot.
You
know
what
we're
going
to
have
to
see.
So
if
we
do
b
percent,
let's
look
here
and
we
see
bind
mount
thing.
B
B
B
However,
this
id
does
not
exist
on
the
system.
That's
why
it's
showing
me
a
thousand
thousand
right.
So
you
know
if
I
do
cat
etsy
password
thousand,
isn't
here
so
because
so
it
has
no
name
right,
but
it
doesn't
make
it
into
nobody,
nobody
which
I
you
know
this,
this
whole
thing.
Clearly,
this
whole
thing
is
like
weirdly
explained
right.
B
Yeah,
why
I
will
say
when
I
proposed
the
this
show
originally,
I
did
say
that
we
should
really
probably
bring
somebody
on
for
this,
because
it's
gonna
be
weird,
but
look
at
that.
I
can
modify
the
file
because
it
was
relabeled
I'm
over
here,
pointing
which
I
know
isn't
helping
anyone
right,
but
you
know
so.
It
was
relabeled
as
a
container
file
t.
So
now
I
actually
was
able
to
edit
the
file.
Okay.
B
C
A
B
B
It's
it's
pretty
automated.
Basically,
the
the
challenge
was
just.
I
had
built
a
container
that
runs
the
go,
get
the
spreadsheet
from
google
cloud,
but
that
container
had
a
bug
in
it.
It
was
missing
a
library
but
because
I
already
had
it,
it
was
one
of
those
things
where
you
know
like.
I
didn't
do
like
a
clean
test
on
it,
yeah,
so
yeah
it
just
needs
a
little
bit
of
editing.
C
B
Sorry
and
then
netherlands,
hack
them
with
5300
points.
No
friction
I
think,
must
have
missed
last
week
is
only
at
4
000
points.
Joe
fuzz
is
still
holding
strong
at
2
300
points,
but
detective
kona
kudo
is
up
and
coming
as
with
bacon
fork,
2,
100
and
1900
points
respectively,
and
they
are
both
ticking
away.
You
know,
they're
is
this.
A
B
B
C
B
And
what
I
think
is
particularly
funny
about
this
is
actually
red
hat
in
general
when
it
comes
to
like
swag
and
giveaways
and
stuff
is
actually
one
of
the
better
performing.
I
don't
know
what
the
right
word
is
for
this,
in
that
I've
worked
with
kind
of
in
the
industry
at
all.
Ever
in
general,
it's
really
really
good
and
oh
yeah,
no.
B
C
A
B
So
what
was
about
to
say
so
yeah
so
points?
Thank
you
for
participating.
We
hope
it
will
be.
You
know,
as
as
chris
said,
as
I
often
say,
turning
into
extrinsic
value
very
very
soon,
but
we
we
essentially
we,
I
think,
we've
actually
gotten
over
the
last
legal
hurdle
we
just
have
to.
We
need
to
kind
of
execute
the
content,
yeah
just
publish
it.
It
basically
landed
what
this
it
was
this
morning
right,
like
7,
30,.
B
Who
was
7
30
this
morning
at
7
30
yesterday
morning,
so
yeah?
So
very,
very
close.
We
really
are
this
time,
but
that's
the
points
going
back
to
our
regularly
scheduled
programming.
For
just
a
moment.
I
wanted
to
kind
of
cut
to
the
chase
a
little
bit
like
like
what
I
was
trying
to
give
was
the
context
of
why
that
was
the
wrong
window.
B
C
A
B
Well,
that's
I
didn't
want
to
bring
it
up,
but
there's
a
whole
story
there
there's
actually.
Maybe
I
should.
I
could
throw
the
art
technic
article
in
there,
but
there's
a
there's,
a
whole
drama
going
on
there
right
now,
but
irc
is
actually
a
heavily
used
place
for
kind
of
the
linux
open
source
community
in
general.
You
know
so
like
kubernetes,
for
example,
uses
slack,
but
you
know
gnome.
B
In
software,
if
it's
been
around
for
a
long
time,
there's
very
strong
and
strict
is
kind
of
the
word
I
mean,
but
not
quite
protocols
and
methods
and
like
usage
patterns,
that
kind
of
stuff.
You
know
one
might
just
call
it
manners
in
a
sense
or
is
that
what's
the
what's
the
like
proper
term
for
manners
like
blinking
in
the
word,
but
there's
basically,
this
whole
set
of
of
rules
that
you
should
follow
when
you
are
using
rc
make.
A
B
A
C
B
There's
a
lot
more
to
that
story,
but
I
don't
remember
why
we
were
talking
about
irc
but
to
talk
about
what
we
were
talking
about
for
the
show
I
will
in
the
further
reading
on
the
show
notes
I'll
put
some
links
to
some
good
articles
about
this,
but
the
reason
we
were
talking
about
it
is
because
occasionally
you
will
run
into
did
I
pull
the
link
where
to
go.
Occasionally
you
will
run
into.
B
Not
so
much,
I
can't
think
of
any
great
examples
without
like
installing
the
stuff,
but
the
point
being
is
that
you'll
log
into
a
container
and
there
will
be
a
bunch
of
different
users
there
owning
different
files
and
stuff.
So
what
you
need
is
a
way
to
map
those
users
to
like
real
users
on
your
machine
on
your
host
machine.
If
you
want
to
operate
on
any
of
those
files
or
any
of
that
stuff.
B
B
However,
that's
excuse
me
not
always
enough,
so
what
you
can
do
is
you
can
modify
it
and
I
just
cut
and
paste
it
to
make
my
life
a
little
easier
to
make
it
so
that
I
can
expand
that
range
and
make
that
a
bigger
number
for
lack
of
a
better
term.
So
now,
if
I
go
in
here,
you'll
see
that
I
actually
have
a
bigger
range
in
theory,
because
it's
going,
I
think
more
to
the
left
right.
B
So
so,
if
we
look
at
the
man
page,
it's
all
right
here
and
basically
it's
like
it's
like
the
start
and
then
account
right
so
yeah.
I
guess
now
in
retrospect
the
example's
not
great,
but
so
it's
like.
I
start
here
at
whatever
this
is
a
hundred
thousand
and
go
65
000
after
that
right,
whereas
this
one
it
starts
at
10
000
and
goes
65
000
after
that.
So
it's
basically
just
kind
of
making
a
big
range
of
uids
that
I
can
play
with.
B
You
can
do
the
exact
same
thing
with
the
guids
and
I'll
just
show
that
which
I
think
the
only
syntactic
different
is
that
you
say
g
here
and
then
we
can
see
that
I
have
these
gids
yay
exactly
the
same,
but
the
reason
I
wanted
to
kind
of
give
all
this
context
or
whatever
is
because
you
will
see
potentially
see
different
and
slightly
subtle
errors
around
the
files.
You.
C
B
Or
around
the
containers
you
try
to
use
or
whatever
that
are
all
related
to
this
problem,
where,
as
your
individual
user,
so
my
you
know
my
kind
of
l,
white
user
here
is
just
user
id
1000
and
gid
1000.
When
I'm
trying
to
run
a
container,
I'm
running
all
those
processes
right
just
like
I
would
be
as
if
they
were
running
locally,
but
I'm
trying
to
write
create
this
kind
of
fictitious
computer,
which
has
a
whole
mess
of
other
user
ids.
B
B
B
C
B
B
C
A
C
A
B
A
A
A
B
B
And
andrew
will
be
here
to
help
me
talk
to
him
and
then
I
will
be
joining
his
show.
I'm
not
sure
what
he's
covering
that
day,
but
it's
mostly
it's
a
it's
more
of
a
question
based
show,
so
I
think
it's
kind
of
a
little
bit
what
comes
up
from
the
audience
as
well,
as
you
know,
kind
of
what
comes
up
in
his
day-to-day
life
between
now
and
then
so
we
will
be
talking
about
all
the
things
there.
B
The
following
week,
obviously
or
maybe
not
obviously,
is
summit
part
do
as
I
saw
somebody
refer
to
it
or
summit.
The
second
second
phase,
which
we've
talked
about
on
the
show
before,
but
it's
kind
of
more
of
the
general
sessions
kind
of
components,
so
a
little
bit
deeper
dive
a
little
bit
more
things
like
road
maps
and
stuff,
like
that.
Maybe
coming
up
about
the
various
individual
things
that
we
do
at
red
hat,
so
you
should
definitely
go
check
that
out.
It's
free!
B
B
B
Like
I'm
really
looking
forward
to
the
container
health
index
one
next
week,
I've
been
trying
to
get
that
scheduled
for
quite
some
time
and
it's
something
that
I
think
doesn't
get
anywhere
near
enough
publicity
about.
You
know,
which
is
something
we
do
and
offer
around
our
content
and
from
a
little
bit
of
conversation
with
brian
previous
to
this.
C
B
A
Feel
free
to
ping
us
on
discord
anytime.
I
actually
have
it
set
up,
so
it
will
ping
me
during
off
hours.
That
doesn't
mean
I'll
respond,
but
if
you
have
an
urgent
question,
I
will
respond
right
so
yeah.
Thank
you
very
much
for
tuning
in
today.
Thank
you,
langdon
for
our
journey
through
the
illustrious
bits
and
pieces
yeah.
B
How
complicated
it
is
and
then
how
like,
like
you,
really
are
doing
this
kind
of
weird
anomalous
thing
in
a
container
yeah,
and
so
you
know,
I
think
it's
it's
important
to
kind
of
understand
what
you're
doing
so.
Then
you
can
kind
of
extrapolate
the
solutions
when
you
run
into
some
of
the
problems
that
you
run
into
exactly.
A
So,
thank
you
all
for
tuning
in,
as
I
said,
join
us
for
asking
openshift
admin
here
at
11
a.m.
Eastern
time
we
will
be
talking
about
alert
manager,
configuration
and
customization.
So
all
you
people
with
kubernetes
clusters
that
want
to
get
alerts
when
things
go
bumper
than
that
please
tune
in,
and
we
will
talk
about
prometheus
and
all
the
fun
things
that
it
brings
to
the
table
until
then
stay
safe
out.
There.