{"action":"created","issue":{"url":"https://api.github.com/repos/codekitchen/dinghy/issues/12","labels_url":"https://api.github.com/repos/codekitchen/dinghy/issues/12/labels{/name}","comments_url":"https://api.github.com/repos/codekitchen/dinghy/issues/12/comments","events_url":"https://api.github.com/repos/codekitchen/dinghy/issues/12/events","html_url":"https://github.com/codekitchen/dinghy/issues/12","id":62167700,"number":12,"title":"NFS squash root access to local user","user":{"login":"yenif","id":8951,"avatar_url":"https://avatars.githubusercontent.com/u/8951?v=3","gravatar_id":"","url":"https://api.github.com/users/yenif","html_url":"https://github.com/yenif","followers_url":"https://api.github.com/users/yenif/followers","following_url":"https://api.github.com/users/yenif/following{/other_user}","gists_url":"https://api.github.com/users/yenif/gists{/gist_id}","starred_url":"https://api.github.com/users/yenif/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yenif/subscriptions","organizations_url":"https://api.github.com/users/yenif/orgs","repos_url":"https://api.github.com/users/yenif/repos","events_url":"https://api.github.com/users/yenif/events{/privacy}","received_events_url":"https://api.github.com/users/yenif/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-03-16T18:16:57Z","updated_at":"2015-03-16T18:36:02Z","closed_at":null,"body":"Currently unfs is set to not munge UIDs leading to the vm having real root access to the shared filesystem and any created files thus having root UID/GID (particularly annoying around `npm install` or `bundle install` into a subdirectory).\r\n\r\nLooks like unfs supports root squashing with anonuid and anongid (http://linux.die.net/man/8/unfsd) which we could set to the executing user for this export. Personally I'd go as far to turn on all_squash to also avoid any other UID pollution from the vm, but that could potentially interfere with some future use case (create as non root with only uid read, next read would probably fail with a wrong uid).\r\n\r\nLooks like this should be a pretty easy change, will try to throw something up this afternoon."},"comment":{"url":"https://api.github.com/repos/codekitchen/dinghy/issues/comments/81858751","html_url":"https://github.com/codekitchen/dinghy/issues/12#issuecomment-81858751","issue_url":"https://api.github.com/repos/codekitchen/dinghy/issues/12","id":81858751,"user":{"login":"yenif","id":8951,"avatar_url":"https://avatars.githubusercontent.com/u/8951?v=3","gravatar_id":"","url":"https://api.github.com/users/yenif","html_url":"https://github.com/yenif","followers_url":"https://api.github.com/users/yenif/followers","following_url":"https://api.github.com/users/yenif/following{/other_user}","gists_url":"https://api.github.com/users/yenif/gists{/gist_id}","starred_url":"https://api.github.com/users/yenif/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yenif/subscriptions","organizations_url":"https://api.github.com/users/yenif/orgs","repos_url":"https://api.github.com/users/yenif/repos","events_url":"https://api.github.com/users/yenif/events{/privacy}","received_events_url":"https://api.github.com/users/yenif/received_events","type":"User","site_admin":false},"created_at":"2015-03-16T18:36:02Z","updated_at":"2015-03-16T18:36:02Z","body":"Ah, well that's annoying..."}}