Comments (5)
Further to the above the "--uidmap" lines seem to cause the following errors:
exec failed: container_linux.go:336: starting container process caused "process_linux.go:90: adding pid 8258 to cgroups caused "failed to write 8258 to cgroup.procs: write /sys/fs/cgroup/systemd/user.slice/user-1000.slice/[email protected]/gnome-terminal-server.service/13eb5ccb9657c3a9a0ab67937927c29dd7c25bebdf943eb27d1900bd59964038/cgroup.procs: permission denied""
podman version 0.10.1
from toolbox.
Further to the above the "--uidmap" lines seem to cause the following errors:
exec failed: container_linux.go:336: starting container process caused
"process_linux.go:90: adding pid 8258 to cgroups caused "failed to write 8258 to cgroup.procs:
write /sys/fs/cgroup/systemd/user.slice/user-1000.slice/[email protected]/gnome-terminal-server.service/13eb5ccb9657c3a9a0ab67937927c29dd7c25bebdf943eb27d1900bd59964038/cgroup.procs: permission denied""
Yes, that's due to runc
(opencontainers/runc#1862). See this comment:
opencontainers/runc#1862 (comment)
We need those --uidmap
lines to map the host's $UID into the toolbox.
Here's an update targeted at Fedora 29 to address this:
https://bodhi.fedoraproject.org/updates/FEDORA-2018-e77cc54309
Unfortunately, since we are frozen for the the final Fedora 29 release, it will only enter the Silverblue 29 image as a zero-day update. Until then, you can try:
$ rpm-ostree override replace /path/to/runc-1.0.0-56.dev.git78ef28e.fc29.rpm
from toolbox.
I am using it on Silverblue 29 beta and CentOS (sudo mode) which I try to
treat inimitable.On an updated clean 29 install I get the following error:
./fedora-toolbox -v enter
unable to start container "fedora-toolbox-gary:29": container create failed:
container_linux.go:336: starting container process caused "setup user: cannot
set any additional groups in a rootless container"
: internal libpod error
./fedora-toolbox: failed to start container fedora-toolbox-gary:29``The culprit seems to be "--group-add wheel" under the podman create.
I haven't seen this before. So far I have been hacking on Silverblue 28. I wonder if there's something off in Fedora 29.
Does it continue to happen after pulling in the above runc
PR? What version of podman do you have? What did you mean by "sudo mode"?
from toolbox.
Hi,the updated runc solved both of the errors. Under CentOS I use the "--sudo --release 29" arguments as rootless podman is not working there at the moment. I also remove the uid mappings as they fail on CentOS but as most of my builds are single user this does not cause me any issues.
Since this is solved for Silverblue 29 that is great and I will derive my own CentOS script which is not a target platform anyway. Thanks for the great work, I am really enjoying Silverblue.
from toolbox.
That's great to hear! :)
Rootless podman
and buildah
are still very new, so it is probably a matter of getting newer versions of those into RHEL and eventually CentOS.
The --sudo
flag was initially meant for debugging rootless bugs, but I am glad that you found some real use for it. I know that Fedora CoreOS is also interested in a rootful toolbox.
Anyway, thanks for getting in touch.
from toolbox.
Related Issues (20)
- Failed to initialize container, AGAIN (Silverblue 39.20240408.0 (2024-04-08T01:47:01Z) HOT 2
- Build succeeded.
- List supported toolbox images
- Cannot access mounted drive with fuse outside of toolbox
- Xwayland broken in toolbox containers HOT 1
- Add distribution: Ubuntu 24.04 LTS HOT 2
- can't start ubuntu (useradd: UID is not unique) HOT 1
- systemd (255.6-1) breaks dependency
- Missing locales on Arch Linux guest HOT 3
- Can't resolve host `toolbox` inside `fedora-toolbox:40` container HOT 4
- Isolate $HOME directory via snapshot and overlay
- Can't enter fedora 40 toolbx: Failed to bind /etc/machine-id HOT 24
- run0 Allows execution on HOT 6
- Gstreamer unable to find plugins in toolbox
- Fish Shell Completions
- toolbox can't source path HOT 2
- Unable to run fzf through flatpak-spawn
- Fedora 39 Image doesn't build
- profile.d/toolbox.sh doesn't take into account TERMINFO_DIRS HOT 3
- Cannot get terminal window size inside toolbox via TIOCGWINSZ ioctl
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from toolbox.