docs: clarify that --userns=keep-id runs container as host UID

Fixes: #24934

Signed-off-by: Daniel Lazaro <git@dlazaro.ca>
This commit is contained in:
Daniel Lazaro
2025-09-24 18:49:56 -04:00
parent d58e496a5e
commit 4652f5c3c6

View File

@ -56,6 +56,8 @@ For details see **--uidmap**.
**keep-id**: creates a user namespace where the current user's UID:GID are mapped to the same values in the container. For containers created by root, the current mapping is created into a new user namespace.
In addition, the init process within the container will run under the current user's UID. This behavior overrides the image's `USER` instruction unless you explicitly set `--user`.
Valid `keep-id` options:
- *uid*=UID: override the UID inside the container that is used to map the current user to.