WIP: Bump subuids/subgids

2025-04-28 18:02:38 +02:00 · 2025-02-18 15:47:01 +02:00 · 2025-02-18 15:47:01 +02:00 · 79b80f0599
commit 79b80f0599
parent ce5ff0d560
2 changed files with 7 additions and 4 deletions
--- a/3
+++ b/3
@ -1,3 +1,6 @@
+#FROM alpine
+
+#RUN touch shite
 # NOTE: Updating the packages to their latest versions requires bumping the
 # Dockerfile args below. For more info about this file, read
 # docs/developer/reproducibility.md.
--- a/dev_scripts/env.py
+++ b/dev_scripts/env.py
@ -160,8 +160,8 @@ DOCKERFILE_BUILD_DEV = r"""FROM {distro}:{version}
 # Create a non-root user to run Dangerzone
 RUN adduser user
 # See https://github.com/freedomofpress/dangerzone/issues/286#issuecomment-1347149783
-RUN echo user:2000:2000 > /etc/subuid
-RUN echo user:2000:2000 > /etc/subgid
+RUN echo user:2000:250000 > /etc/subuid
+RUN echo user:2000:250000 > /etc/subgid

 # XXX: We need the empty source folder, so that we can trick Poetry to create a
 # link to the project's path. This way, we should be able to do `import
@ -456,7 +456,7 @@ class Env:
                "--uidmap",
                "0:1:1000",
                "--uidmap",
-                "1001:1001:64536",
+                "1001:1001:251999",
            ]
            gidmaps = [
                "--gidmap",
@ -464,7 +464,7 @@ class Env:
                "--gidmap",
                "0:1:1000",
                "--gidmap",
-                "1001:1001:64536",
+                "1001:1001:251999",
            ]
            run_cmd += uidmaps + gidmaps