OverlayFs Atomic and User Permissions

Latest response

I have a RHEL7.9 server, installed with Atomic, Docker, and OpenSCAP.

I have a need for all my users to run oscap-docker to scan container images.
However the command fails with:
- "Failed to mount OverlayFS device"
"mount: only root can use "--options" option.

the OpenSCAP tool "oscap-docker" relies on Atomic as the container orchestrator for scanning images.

I don't want to give my users sodoers access to the mount command.

What are my options to ensure Atomic will be able to run and mount containers for all users, but without giving all users root permissions?

TL

Responses