containerd / nydus-snapshotter

A containerd snapshotter with data deduplication and lazy loading in P2P fashion
https://nydus.dev/
Apache License 2.0
168 stars 96 forks source link

[Rootless] Unsound nydus-snapshotter crash with rootless + cgroup enabled #589

Open inklesspen1rus opened 5 months ago

inklesspen1rus commented 5 months ago

Tried to user nydus-snapshotter from rootless user but got unsound crash:

$ /usr/local/bin/containerd-nydus-grpc --config /home/inklesspen/.config/nydus/config.toml
$ echo $?
1
$

I got that until disabled cgroup in /home/inklesspen/.config/nydus/config.toml

Is that good idea to add some error messages on crashes?

imeoer commented 5 months ago

We haven't tried running nydus snapshotter in rootless, maybe we can try adding some logs to the snapshot/snapshot.go -> NewSnapshotter code to debug, thanks!