Allow identity mappings for unprivileged containers
Allow identity mappings for unprivileged containers

Allow identity mapped uid/gid ranges in the raw.idmap config even if the
LXD_UNPRIVILEGED_ONLY environment variable is set.  Make sure that this
also prevents the root user in the parent namespace from being mapped
into the child namespace.

This is useful for mapping the uid of the user into the child namespace
so that they can still access files in their home directory.

Signed-off-by: Chirantan Ekbote <35787c0e27de5c48735e07f8324823b765e8bcbc@chromium.org>

stgraber/lxd,lxc/lxd,Skarlso/lxd,atxwebs/lxd,hallyn/lxd,atxwebs/lxd,atxwebs/lxd,hallyn/lxd,lxc/lxd,hallyn/lxd,stgraber/lxd,lxc/lxd,Skarlso/lxd,mjeanson/lxd,Skarlso/lxd,stgraber/lxd,stgraber/lxd,hallyn/lxd,lxc/lxd,lxc/lxd,stgraber/lxd,mjeanson/lxd,hallyn/lxd,stgraber/lxd,mjeanson/lxd,hallyn/lxd,Skarlso/lxd,stgraber/lxd,lxc/lxd,lxc/lxd,atxwebs/lxd