89luca89 / distrobox

Use any linux distribution inside your terminal. Enable both backward and forward compatibility with software and freedom to use whatever distribution you’re more comfortable with. Mirror available at: https://gitlab.com/89luca89/distrobox
https://distrobox.it/
GNU General Public License v3.0
9.43k stars 385 forks source link

[Error] Unable to start rootless container created by distrobox with podman and runc v1.2.0~rc1 #1359

Closed fcrozat closed 2 months ago

fcrozat commented 2 months ago

This is a continuation of openSUSE Tumbleweed bug report: https://bugzilla.suse.com/show_bug.cgi?id=1222499

On openSUSE Tumbleweed with runc 1.2.0~rc1, distrobox created containers with podman/rootless won't start: Error: unable to start container "988cc7b326ef04596a3d14ccc41bbdb43c74a6420b5e476b5da00b4e381f0d6f": runc: runc create failed: unable to start container process: error during container init: error mounting "/" to rootfs at "/run/host": mount dst=/run/host, dstFd=/proc/thread-self/fd/8, flags=0x5020: operation not permitted: OCI permission denied"

This works fine with older runc or with crun.

To reproduce:

DBX_CONTAINER_MANAGER="podman" distrobox create --image fedora:latest --name fedora -a "--runtime runc"

DBX_CONTAINER_MANAGER="podman" distrobox enter fedora

this will fail at "enter" command.

However:

distrobox rm -f fedora (to do the cleanup)

DBX_CONTAINER_MANAGER="podman" distrobox create --image fedora:latest --name fedora -a "--runtime crun"

DBX_CONTAINER_MANAGER="podman" distrobox enter fedora

will work nicely