containerd / nerdctl

contaiNERD CTL - Docker-compatible CLI for containerd, with support for Compose, Rootless, eStargz, OCIcrypt, IPFS, ...
Apache License 2.0
8.16k stars 609 forks source link

nerdctl run -d -m failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process (`memory.memsw.limit_in_bytes: no such file or directory: unknown`) #2305

Open sky1230 opened 1 year ago

sky1230 commented 1 year ago

Description

nerdctl run -d -m xx failed but nerdctl run -d xx ok

Steps to reproduce the issue

1.run in root user

  1. test nerdctl run container and create container
  2. nerdctl run -d --name nginx -p 80:80 nginx:alpine

    1f67345beb5852bf5a88df336ea5810f2dee60e2c63c776e38f358e6cfa5950c 4 .#nerdctl version Client: Version: v1.4.0 OS/Arch: linux/amd64 Git commit: 7e8114a82da342cdbec9a518c5c6a1cce58105e9 buildctl: Version: v0.11.6 GitCommit: 2951a28cd7085eb18979b1f710678623d94ed578

Server: containerd: Version: v1.7.1 GitCommit: 1677a17964311325ed1c31e2c0a3589ce6d5c30d runc: Version: 1.1.7 GitCommit: v1.1.7-0-g860f061b

lsb_release -a

No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 20.04 LTS Release: 20.04 Codename: focal

uname -r

5.4.0-29-generic

apt search libseccomp

libseccomp-dev/focal-updates,focal-security,now 2.5.1-1ubuntu1~20.04.2 amd64 [installed]

Describe the results you received and expected

nerdctl run -d -m 100m --name nginx -p 80:80 nginx:alpine

docker.io/library/nginx:alpine: resolved |++++++++++++++++++++++++++++++++++++++| index-sha256:b35f5bceca1f97a5cf7346a6964f8fc2ae9ffdabb94ea97f9ae50bb802f3b557: done |++++++++++++++++++++++++++++++++++++++| manifest-sha256:2d4efe74ef541248b0a70838c557de04509d1115dec6bfc21ad0d66e41574a8a: done |++++++++++++++++++++++++++++++++++++++| config-sha256:4937520ae206c8969734d9a659fc1e6594d9b22b9340bf0796defbea0c92dd02: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:4db1b89c0bd13344176ddce2d093b9da2ae58336823ffed2009a7ea4b62d2a95: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:768e67c521a97f2acf0382a9750c4d024fc1e541e22bab2dec1aad36703278f1: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:9f05b0cc5f6e8010689a6331bad9ca02c62caa226b7501a64d50dcca0847dcdb: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:bd338968799fef766509223449d72392692f1f56802da9059ae3f0965c2885e2: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:4c5efdb87c4a2350cc1c2781a80a4d3e895447007d9d8eac1e743bf80dd75c84: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:6a107772494d184e0fddf5d99c877e2fa8d07d1d47b714c17b7d20eba1da01c6: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:c8794a7158bff7f518985e76c590029ccc6b4c0f6e66e82952c3476c095225c9: done |++++++++++++++++++++++++++++++++++++++| layer-sha256:8de2a93581dcb1cc62dd7b6e1620bc8095befe0acb9161d5f053a9719e145678: done |++++++++++++++++++++++++++++++++++++++| elapsed: 5.0 s total: 16.2 M (3.2 MiB/s) FATA[0006] failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error setting cgroup config for procHooks process: open /sys/fs/cgroup/memory/default/efb56c11b4a2000da2dfb381ce8cbfcf47085c0ac7f6478d1956b696894ca170/memory.memsw.limit_in_bytes: no such file or directory: unknown

What version of nerdctl are you using?

nerdctl-full-1.4.0-linux-amd64.tar.gz

Are you using a variant of nerdctl? (e.g., Rancher Desktop)

None

Host information

No response

AkihiroSuda commented 1 year ago

Adding swapaccount=1 to kernel cmdline may work

apostasie commented 2 months ago

@AkihiroSuda is there something tbd here?