diff --git a/doc/guix.texi b/doc/guix.texi index f49154dc1b..fe84b52052 100644 --- a/doc/guix.texi +++ b/doc/guix.texi @@ -18848,6 +18848,13 @@ User Accounts special-case and is automatically added whether or not it is specified. @end defvar +@cindex containers, subordinate IDs +The Linux kernel also implements @dfn{subordinate user and group IDs}, +or ``subids'', which are used to map the ID of a user and group to +several IDs inside separate name spaces---inside ``containers''. +@xref{subordinate-user-group-ids, the subordinate user and group ID +service}, for information on how to configure it. + @node Keyboard Layout @section Keyboard Layout @@ -41524,13 +41531,15 @@ Miscellaneous Services @c %end of fragment -@cindex Subids -@subsubheading Subid Service +@anchor{subordinate-user-group-ids} +@cindex subordinate user and group IDs +@cindex subid, subordinate user and group IDs +@subsubheading Subordinate User and Group ID Service -Among the virtualization facilities implemented by the Linux kernel, the is the -concept of subordinate IDs. Subordinate IDs allow for mapping user and group +Among the virtualization facilities implemented by the Linux kernel is the +concept of @dfn{subordinate IDs}. Subordinate IDs allow for mapping user and group IDs inside process namespaces to user and group IDs of the host system. -Subordinate user ID ranges (subids) allow to map virtual user IDs inside +Subordinate user ID ranges (subuids) allow users to map virtual user IDs inside containers to the user ID of an unprivileged user of the host system. Subordinate group ID ranges (subgids), instead map virtual group IDs to the group ID of an unprivileged user on the host system. You can access