alvistack / ansible-role-podman

Ansible Role for Podman Installation
Apache License 2.0
57 stars 6 forks source link

Multiple problem on Debian 12 #25

Open pulsar895 opened 4 weeks ago

pulsar895 commented 4 weeks ago

Hello,

First of all, many thanks for your work. However, I have several problems, two of which I was able to correct.

I seem to be missing packages for Debian 12 :

$ podman version
Client:       Podman Engine
Version:      5.1.1
API Version:  5.1.1
Go Version:   go1.22.4
Built:        Thu Jan  1 00:00:00 1970
OS/Arch:      linux/amd64
WARN[0000] Failed to add pause process to systemd sandbox cgroup: dbus: couldn't determine address of session bus
$ sudo apt install --assume-yes dbus-user-session
[...]
$ podman version
Client:       Podman Engine
Version:      5.1.1
API Version:  5.1.1
Go Version:   go1.22.4
Built:        Thu Jan  1 00:00:00 1970
OS/Arch:      linux/amd64
$ podman run -ti docker.io/library/alpine /bin/sh
Error: could not find pasta, the network namespace can't be configured: exec: "pasta": executable file not found in $PATH
$ sudo apt install --assume-yes passt
[...]
$ podman run -ti docker.io/library/alpine /bin/sh
/ #

And finally, the last problem I can't solve, which seems to be apparmor related:

$ podman run -ti docker.io/library/alpine /bin/sh
Trying to pull docker.io/library/alpine:latest...
Getting image source signatures
Copying blob d25f557d7f31 done   | 
Copying config 1d34ffeaf1 done   | 
Writing manifest to image destination
Error: pasta failed with exit code 1:
Couldn't open network namespace /run/user/1001/netns/netns-a7f183ff-5cf7-a9ab-304f-23d76da9450a: Permission denied

When launching my container, I get this error:

$ sudo dmesg --follow-new
[  214.033148] audit: type=1400 audit(1717774894.345:18): apparmor="DENIED" operation="open" profile="passt" name="/run/user/1001/netns/netns-ee1afd7a-c406-0b45-7e3e-9283cb35e0b1" pid=929 comm="pasta" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0

Using the trixie or sid version of apparmor doesn't solve the problem.

Thanks again for your work.

May the force be with you.

pulsar895 commented 4 weeks ago

I got an answer to my problem: https://github.com/alvistack/ansible-role-podman/issues/25

I'll let you have a look.

May the force be with you.