search

containers / buildah

A tool that facilitates building OCI images.
https://buildah.io
Apache License 2.0
7.41k stars 782 forks source link

build fails on fedora 33 beta for a dockerfile #2701

Closed damnms closed 3 years ago

damnms commented 4 years ago

Description i get an error on fedora 33 beta with podman when i try to build one of the dockerfiles

Steps to reproduce the issue:

  1. checkout https://gitlab.com/olze/fakecam
  2. run: cd fakecam && podman build -t bodypix ./bodypix

Describe the results you received: an error which was working a couple of days/weeks before

STEP 1: FROM tensorflow/tensorflow
STEP 2: RUN apt update && apt install -y curl make build-essential     && curl -sL https://deb.nodesource.com/setup_12.x | bash -     && apt-get -y install nodejs     && mkdir /.npm     && chmod 777 /.npm
--> Using cache 1f3b234d1a2c3b56be00dc2f8b4e17121e587d7d8c4d1e7fa4cdbfc2bcce708d
--> 1f3b234d1a2
STEP 3: ENV TF_FORCE_GPU_ALLOW_GROWTH=true
--> Using cache 1ce181da550747d729f1997c9c0debcb3a00f9e0e700b25787436c39e6cd037d
--> 1ce181da550
STEP 4: WORKDIR /src
--> Using cache cbcee1187928b29973211456802aac97a194a2134a6c3ea617f17581454c6dd2
--> cbcee118792
STEP 5: COPY package.json /src/
--> Using cache 7bc760e4a9a2e37137e0a6dae105f9ceaf64163d87ad8ca0486df08cb7c89467
--> 7bc760e4a9a
STEP 6: RUN npm install
--> Using cache 1f6a8bc8405c82e4713106b4190422feb5f5fde73135ffb061160a5501af8ea4
--> 1f6a8bc8405
STEP 7: COPY app.js /src/
Error: error building at STEP "COPY app.js /src/": error adding sources [/home/oli/fakecam/bodypix/app.js]: error storing "/home/oli/fakecam/bodypix/app.js": error during bulk transfer for copier.request{Request:"PUT", Root:"/", preservedRoot:"/home/oli/.local/share/containers/storage/overlay/8c2eff926fbbda65e3897a49af6eabde863b35c03e2e5ce2f7490e1430644a92/merged", rootPrefix:"/home/oli/.local/share/containers/storage/overlay/8c2eff926fbbda65e3897a49af6eabde863b35c03e2e5ce2f7490e1430644a92/merged", Directory:"/src", preservedDirectory:"/home/oli/.local/share/containers/storage/overlay/8c2eff926fbbda65e3897a49af6eabde863b35c03e2e5ce2f7490e1430644a92/merged/src", Globs:[]string{}, preservedGlobs:[]string{}, StatOptions:copier.StatOptions{CheckForArchives:false, Excludes:[]string(nil)}, GetOptions:copier.GetOptions{UIDMap:[]idtools.IDMap(nil), GIDMap:[]idtools.IDMap(nil), Excludes:[]string(nil), ExpandArchives:false, StripSetuidBit:false, StripSetgidBit:false, StripStickyBit:false, StripXattrs:false, KeepDirectoryNames:false}, PutOptions:copier.PutOptions{UIDMap:[]idtools.IDMap{}, GIDMap:[]idtools.IDMap{}, ChownDirs:(*idtools.IDPair)(0xc000041610), ChmodDirs:(*os.FileMode)(nil), ChownFiles:(*idtools.IDPair)(0xc000041620), ChmodFiles:(*os.FileMode)(nil), StripXattrs:false, IgnoreXattrErrors:false}, MkdirOptions:copier.MkdirOptions{UIDMap:[]idtools.IDMap(nil), GIDMap:[]idtools.IDMap(nil), ChownNew:(*idtools.IDPair)(nil), ChmodNew:(*os.FileMode)(nil)}}: copier: put: error creating "/src/app.js": incorrect length (0 != 1096)

Describe the results you expected: no error and a build image

Output of rpm -q buildah or apt list buildah:

i do not have buildah installed as standalone, it runs in podman i guess

podman-2.1.1-12.fc33.x86_64

Output of buildah version:

(paste your output here)

Output of podman version if reporting a podman build issue:

oli @ ~/fakecam - [master] $ podman version
Version:      2.1.1
API Version:  2.0.0
Go Version:   go1.15.2
Built:        Wed Oct  7 18:21:20 2020
OS/Arch:      linux/amd64

*Output of `cat /etc/release`:**

oli @ ~/fakecam - [master] $ cat /etc/*release*
Fedora release 33 (Thirty Three)
NAME=Fedora
VERSION="33 (Thirty Three)"
ID=fedora
VERSION_ID=33
VERSION_CODENAME=""
PLATFORM_ID="platform:f33"
PRETTY_NAME="Fedora 33 (Thirty Three)"
ANSI_COLOR="0;38;2;60;110;180"
LOGO=fedora-logo-icon
CPE_NAME="cpe:/o:fedoraproject:fedora:33"
HOME_URL="https://fedoraproject.org/"
DOCUMENTATION_URL="https://docs.fedoraproject.org/en-US/fedora/f33/system-administrators-guide/"
SUPPORT_URL="https://fedoraproject.org/wiki/Communicating_and_getting_help"
BUG_REPORT_URL="https://bugzilla.redhat.com/"
REDHAT_BUGZILLA_PRODUCT="Fedora"
REDHAT_BUGZILLA_PRODUCT_VERSION=33
REDHAT_SUPPORT_PRODUCT="Fedora"
REDHAT_SUPPORT_PRODUCT_VERSION=33
PRIVACY_POLICY_URL="https://fedoraproject.org/wiki/Legal:PrivacyPolicy"
Fedora release 33 (Thirty Three)
Fedora release 33 (Thirty Three)
cpe:/o:fedoraproject:fedora:33

Output of uname -a:

oli @ ~/fakecam - [master] $ uname -a
Linux localhost.localdomain 5.8.15-301.fc33.x86_64 #1 SMP Thu Oct 15 16:58:06 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

Output of cat /etc/containers/storage.conf:

oli @ ~/fakecam - [master] $ cat /etc/containers/storage.conf 
# This file is is the configuration file for all tools
# that use the containers/storage library.
# See man 5 containers-storage.conf for more information
# The "container storage" table contains all of the server options.
[storage]

# Default Storage Driver
driver = "overlay"

# Temporary storage location
runroot = "/var/run/containers/storage"

# Primary Read/Write location of container storage
graphroot = "/var/lib/containers/storage"

# Storage path for rootless users
#
# rootless_storage_path = "$HOME/.local/share/containers/storage"

[storage.options]
# Storage options to be passed to underlying storage drivers

# AdditionalImageStores is used to pass paths to additional Read/Only image stores
# Must be comma separated list.
additionalimagestores = [
]

# Remap-UIDs/GIDs is the mapping from UIDs/GIDs as they should appear inside of
# a container, to the UIDs/GIDs as they should appear outside of the container,
# and the length of the range of UIDs/GIDs.  Additional mapped sets can be
# listed and will be heeded by libraries, but there are limits to the number of
# mappings which the kernel will allow when you later attempt to run a
# container.
#
# remap-uids = 0:1668442479:65536
# remap-gids = 0:1668442479:65536

# Remap-User/Group is a user name which can be used to look up one or more UID/GID
# ranges in the /etc/subuid or /etc/subgid file.  Mappings are set up starting
# with an in-container ID of 0 and then a host-level ID taken from the lowest
# range that matches the specified name, and using the length of that range.
# Additional ranges are then assigned, using the ranges which specify the
# lowest host-level IDs first, to the lowest not-yet-mapped in-container ID,
# until all of the entries have been used for maps.
#
# remap-user = "containers"
# remap-group = "containers"

# Root-auto-userns-user is a user name which can be used to look up one or more UID/GID
# ranges in the /etc/subuid and /etc/subgid file.  These ranges will be partitioned
# to containers configured to create automatically a user namespace.  Containers
# configured to automatically create a user namespace can still overlap with containers
# having an explicit mapping set.
# This setting is ignored when running as rootless.
# root-auto-userns-user = "storage"
#
# Auto-userns-min-size is the minimum size for a user namespace created automatically.
# auto-userns-min-size=1024
#
# Auto-userns-max-size is the minimum size for a user namespace created automatically.
# auto-userns-max-size=65536

[storage.options.overlay]
# ignore_chown_errors can be set to allow a non privileged user running with
# a single UID within a user namespace to run containers. The user can pull
# and use any image even those with multiple uids.  Note multiple UIDs will be
# squashed down to the default uid in the container.  These images will have no
# separation between the users in the container. Only supported for the overlay
# and vfs drivers.
#ignore_chown_errors = "false"

# Path to an helper program to use for mounting the file system instead of mounting it
# directly.
#mount_program = "/usr/bin/fuse-overlayfs"

# mountopt specifies comma separated list of extra mount options
mountopt = "nodev,metacopy=on"

# Set to skip a PRIVATE bind mount on the storage home directory.
# skip_mount_home = "false"

# Size is used to set a maximum size of the container image.
# size = ""

[storage.options.thinpool]
# Storage Options for thinpool

# autoextend_percent determines the amount by which pool needs to be
# grown. This is specified in terms of % of pool size. So a value of 20 means
# that when threshold is hit, pool will be grown by 20% of existing
# pool size.
# autoextend_percent = "20"

# autoextend_threshold determines the pool extension threshold in terms
# of percentage of pool size. For example, if threshold is 60, that means when
# pool is 60% full, threshold has been hit.
# autoextend_threshold = "80"

# basesize specifies the size to use when creating the base device, which
# limits the size of images and containers.
# basesize = "10G"

# blocksize specifies a custom blocksize to use for the thin pool.
# blocksize="64k"

# directlvm_device specifies a custom block storage device to use for the
# thin pool. Required if you setup devicemapper.
# directlvm_device = ""

# directlvm_device_force wipes device even if device already has a filesystem.
# directlvm_device_force = "True"

# fs specifies the filesystem type to use for the base device.
# fs="xfs"

# log_level sets the log level of devicemapper.
# 0: LogLevelSuppress 0 (Default)
# 2: LogLevelFatal
# 3: LogLevelErr
# 4: LogLevelWarn
# 5: LogLevelNotice
# 6: LogLevelInfo
# 7: LogLevelDebug
# log_level = "7"

# min_free_space specifies the min free space percent in a thin pool require for
# new device creation to succeed. Valid values are from 0% - 99%.
# Value 0% disables
# min_free_space = "10%"

# mkfsarg specifies extra mkfs arguments to be used when creating the base
# device.
# mkfsarg = ""

# metadata_size is used to set the `pvcreate --metadatasize` options when
# creating thin devices. Default is 128k
# metadata_size = ""

# Size is used to set a maximum size of the container image.
# size = ""

# use_deferred_removal marks devicemapper block device for deferred removal.
# If the thinpool is in use when the driver attempts to remove it, the driver
# tells the kernel to remove it as soon as possible. Note this does not free
# up the disk space, use deferred deletion to fully remove the thinpool.
# use_deferred_removal = "True"

# use_deferred_deletion marks thinpool device for deferred deletion.
# If the device is busy when the driver attempts to delete it, the driver
# will attempt to delete device every 30 seconds until successful.
# If the program using the driver exits, the driver will continue attempting
# to cleanup the next time the driver is used. Deferred deletion permanently
# deletes the device and all data stored in device will be lost.
# use_deferred_deletion = "True"

# xfs_nospace_max_retries specifies the maximum number of retries XFS should
# attempt to complete IO when ENOSPC (no space) error is returned by
# underlying storage device.
# xfs_nospace_max_retries = "0"
nalind commented 4 years ago

Hmm, that seems to work when I try it here, but in attempting to look at why that error might be reported, I spotted that we're not checking for errors that occur while creating the file in the destination before checking if we wrote out the right number of bytes for its contents. That suggests that a different error occurred, but we mis-reported it.

If you can run strace -e openat -f podman build -f Dockerfile.add ./bodypix with this in bodypix/Dockerfile.add:

FROM scratch
ADD app.js src/

and it still produces the error, we should be able to pick out the error from the output.

damnms commented 4 years ago

strace.log executed : oli @ ~/fakecam - [master] $ strace -e openat -f podman build -f Dockerfile.add ./bodypix > strace.log 2>&1

nalind commented 4 years ago

Hmm, given the call that created the file was logged as

[pid 45311] openat(AT_FDCWD, "/src/app.js", O_WRONLY|O_CREAT|O_EXCL|O_TRUNC|O_CLOEXEC, 0600) = 9

without producing an error, and the final exit status was 0, that unfortunately didn't reproduce the error as I'd hoped it would.

If you can reliably reproduce the problem using the original Dockerfile, can you attempt running the original build command under strace as well? It may hang when attempting to run the RUN instructions, and if it doesn't, it'll produce a much, much larger amount of output, but my attempt to have you reproduce the error while avoiding those issues wasn't able to trigger the error, so that's the next thing to check.

Meanwhile, #2703 should at least fix the error reporting.

damnms commented 4 years ago

is the cwd is correct?

nalind commented 4 years ago

After it chroot()s into the destination rootfs, it is, yes.

XVilka commented 4 years ago

I have the similar problem -

FROM alpine:3.12.0
RUN apk update
[i] ℤ podman build .                                                                                                                                                                                                              17:41:18 
STEP 1: FROM alpine:3.12.0
STEP 2: RUN apk update
2020-10-30T09:41:26.000686543Z: sd-bus call: Input/output error
error running container: error creating container for [/bin/sh -c apk update]: : exit status 1
Error: error building at STEP "RUN apk update": error while running runtime: exit status 1

Relevant strace log part:

openat(AT_FDCWD, "/proc/self/mountinfo", O_RDONLY|O_CLOEXEC) = 15
epoll_ctl(4, EPOLL_CTL_ADD, 15, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = 0
fcntl(15, F_GETFL)                      = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(15, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
read(15, "765 764 0:34 /root / rw,relatime"..., 4096) = 3663
read(15, "", 4096)                      = 0
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc00008280c) = 0
close(15)                               = 0
unlinkat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay/1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14", 0) = -1 EISDIR (Is a directory)
unlinkat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay/1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14", AT_REMOVEDIR) = -1 ENOTEMPTY (Directory not empty)
openat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay", O_RDONLY|O_CLOEXEC) = 15
epoll_ctl(4, EPOLL_CTL_ADD, 15, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc000082834) = -1 EPERM (Operation not permitted)
unlinkat(15, "1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14", 0) = -1 EISDIR (Is a directory)
newfstatat(15, "1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14", {st_mode=S_IFDIR|0700, st_size=34, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(15, "1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14", O_RDONLY|O_CLOEXEC) = 16
epoll_ctl(4, EPOLL_CTL_ADD, 16, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 16, 0xc0000826ec) = -1 EPERM (Operation not permitted)
getdents64(16, 0xc000528000 /* 6 entries */, 8192) = 152
getdents64(16, 0xc000528000 /* 0 entries */, 8192) = 0
unlinkat(16, "diff", 0)                 = -1 EISDIR (Is a directory)
newfstatat(16, "diff", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(16, "diff", O_RDONLY|O_CLOEXEC)  = 14
epoll_ctl(4, EPOLL_CTL_ADD, 14, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 14, 0xc00008254c) = -1 EPERM (Operation not permitted)
getdents64(14, 0xc00053c000 /* 2 entries */, 8192) = 48
getdents64(14, 0xc00053c000 /* 0 entries */, 8192) = 0
close(14)                               = 0
unlinkat(16, "diff", AT_REMOVEDIR)      = 0
unlinkat(16, "link", 0)                 = 0
unlinkat(16, "work", 0)                 = -1 EISDIR (Is a directory)
newfstatat(16, "work", {st_mode=S_IFDIR|0700, st_size=8, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(16, "work", O_RDONLY|O_CLOEXEC)  = 14
epoll_ctl(4, EPOLL_CTL_ADD, 14, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 14, 0xc00014554c) = -1 EPERM (Operation not permitted)
getdents64(14, 0xc000544000 /* 3 entries */, 8192) = 72
getdents64(14, 0xc000544000 /* 0 entries */, 8192) = 0
unlinkat(14, "work", 0)                 = -1 EISDIR (Is a directory)
newfstatat(14, "work", {st_mode=S_IFDIR|0700, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(14, "work", O_RDONLY|O_CLOEXEC)  = 17
epoll_ctl(4, EPOLL_CTL_ADD, 17, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 17, 0xc0001453ac) = -1 EPERM (Operation not permitted)
getdents64(17, 0xc00054c000 /* 2 entries */, 8192) = 48
getdents64(17, 0xc00054c000 /* 0 entries */, 8192) = 0
close(17)                               = 0
unlinkat(14, "work", AT_REMOVEDIR)      = 0
close(14)                               = 0
unlinkat(16, "work", AT_REMOVEDIR)      = 0
unlinkat(16, "lower", 0)                = 0
close(16)                               = 0
unlinkat(15, "1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14", AT_REMOVEDIR) = 0
close(15)                               = 0
unlinkat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers/1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14.tar-split.gz", 0) = -1 ENOENT (No such file or directory)
unlinkat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers/1a7d54ec0f7e5c85a7318efcf8f6780ee305574b7c3a05ae1dbb8139c96d4f14.tar-split.gz", AT_REMOVEDIR) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/run/user/1000/containers/overlay-layers/mountpoints.lock", O_RDWR|O_CREAT|O_CLOEXEC, 0644) = 14
fcntl(14, F_SETLKW, {l_type=F_WRLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
newfstatat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers", {st_mode=S_IFDIR|0700, st_size=352, ...}, 0) = 0
openat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers/.tmp-layers.json392651895", O_RDWR|O_CREAT|O_EXCL|O_CLOEXEC, 0600) = 15
epoll_ctl(4, EPOLL_CTL_ADD, 15, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc000145a84) = -1 EPERM (Operation not permitted)
write(15, "[{\"id\":\"50644c29ef5a27c9a40c393a"..., 792) = 792
fdatasync(15)                           = 0
close(15)                               = 0
fchmodat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers/.tmp-layers.json392651895", 0600) = 0
newfstatat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers/layers.json", {st_mode=S_IFREG|0600, st_size=1047, ...}, AT_SYMLINK_NOFOLLOW) = 0
renameat(AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers/.tmp-layers.json392651895", AT_FDCWD, "/home/akochkov/.local/share/containers/storage/overlay-layers/layers.json") = 0
getrandom("\xba\x07\x06\xb7\x0d\x6a\x6b\xf2\xd8\xd7\x2d\xf9\x2e\x30\xe2\x59\x16\x17\x7e\x0d\x8c\x10\x0e\x66\xdc\x7c\xcf\x27\x33\x69\x16\xeb", 32, 0) = 32
lseek(11, 0, SEEK_SET)                  = 0
write(11, "ba0706b70d6a6bf2d8d72df92e30e259"..., 64) = 64
newfstatat(AT_FDCWD, "/run/user/1000/containers/overlay-layers", {st_mode=S_IFDIR|0700, st_size=80, ...}, 0) = 0
openat(AT_FDCWD, "/run/user/1000/containers/overlay-layers/.tmp-mountpoints.json851094890", O_RDWR|O_CREAT|O_EXCL|O_CLOEXEC, 0600) = 15
epoll_ctl(4, EPOLL_CTL_ADD, 15, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc000145a54) = -1 EPERM (Operation not permitted)
write(15, "[]", 2)                      = 2
fdatasync(15)                           = 0
close(15)                               = 0
fchmodat(AT_FDCWD, "/run/user/1000/containers/overlay-layers/.tmp-mountpoints.json851094890", 0600) = 0
newfstatat(AT_FDCWD, "/run/user/1000/containers/overlay-layers/mountpoints.json", {st_mode=S_IFREG|0600, st_size=2, ...}, AT_SYMLINK_NOFOLLOW) = 0
renameat(AT_FDCWD, "/run/user/1000/containers/overlay-layers/.tmp-mountpoints.json851094890", AT_FDCWD, "/run/user/1000/containers/overlay-layers/mountpoints.json") = 0
openat(AT_FDCWD, "/run/user/1000/containers/overlay-layers/mountpoints.json", O_RDONLY|O_CLOEXEC) = 15
epoll_ctl(4, EPOLL_CTL_ADD, 15, {EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, {u32=3606092760, u64=140569295756248}}) = -1 EPERM (Operation not permitted)
epoll_ctl(4, EPOLL_CTL_DEL, 15, 0xc000145aa4) = -1 EPERM (Operation not permitted)
fstat(15, {st_mode=S_IFREG|0600, st_size=2, ...}) = 0
read(15, "[]", 514)                     = 2
read(15, "", 512)                       = 0
close(15)                               = 0
getrandom("\x85\x2b\x7b\xd3\xbe\xef\x29\x6d\xf1\xfd\x40\x5d\x63\x20\x5c\xa1\x0f\x5c\xef\x43\xf1\x13\xd2\xfc\xa0\x3a\x7a\x99\x8c\x00\x9d\x84", 32, 0) = 32
lseek(14, 0, SEEK_SET)                  = 0
write(14, "852b7bd3beef296df1fd405d63205ca1"..., 64) = 64
close(14)                               = 0
futex(0xc000580148, FUTEX_WAKE_PRIVATE, 1) = 1
close(13)                               = 0
close(12)                               = 0
close(11)                               = 0
openat(AT_FDCWD, "/etc/localtime", O_RDONLY) = 11
read(11, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 561
read(11, "", 4096)                      = 0
close(11)                               = 0
sendmsg(3, {msg_name={sa_family=AF_UNIX, sun_path="/run/systemd/journal/socket"}, msg_namelen=30, msg_iov=[{iov_base="PRIORITY=6\nMESSAGE=2020-10-30 17"..., iov_len=222}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 222
write(2, "Error: error building at STEP \"R"..., 91Error: error building at STEP "RUN apk update": error while running runtime: exit status 1
) = 91
exit_group(125)                         = ?
+++ exited with 125 +++
rhatdan commented 4 years ago

This install looks like it is attempting to talk to the journal from within the container, which is not going to work?

rhatdan commented 4 years ago

The original example worked for me.

Could you also try this as root, to see if you have problems with user namespace?

XVilka commented 3 years ago

@rhatdan in my case error disappeared if I run the same command from root.

XVilka commented 3 years ago

I also noted the errors in journalctl --user:

Nov 27 14:14:20 akochkov-linux plasmashell[3139]: qt.qpa.wayland: Wayland does not support QWindow::requestActivate()
Nov 27 14:14:20 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for GroupDialog_QMLTYPE_364(0x55ddb4186640)
Nov 27 14:14:20 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for GroupDialog_QMLTYPE_364(0x55ddb4186640)
Nov 27 14:16:59 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:16:59 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:16:59 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:23:09 akochkov-linux /usr/libexec/gdm-wayland-session[2157]: kwin_libinput: Libinput: event4  - Chicony HP Elite USB Keyboard: client bug: event processing lagging behind by 14ms, your system is too slow
Nov 27 14:24:40 akochkov-linux /usr/libexec/gdm-wayland-session[2157]: This plugin does not support raise()
Nov 27 14:26:05 akochkov-linux /usr/libexec/gdm-wayland-session[2157]: kwin_libinput: Libinput: event4  - Chicony HP Elite USB Keyboard: client bug: event processing lagging behind by 12ms, your system is too slow
Nov 27 14:26:14 akochkov-linux /usr/libexec/gdm-wayland-session[2157]: kwin_libinput: Libinput: event4  - Chicony HP Elite USB Keyboard: client bug: event processing lagging behind by 14ms, your system is too slow
Nov 27 14:26:34 akochkov-linux /usr/libexec/gdm-wayland-session[2144]: dbus-daemon[2144]: [session uid=1000 pid=2144] Activating service name='org.freedesktop.systemd1' requested by ':1.854' (uid=1000 pid=142545 comm="podman build -t deb-woody-r2 . " label="unconfined_u:system_r:container_runtime_t:s0-s0:c0.c1023")
Nov 27 14:26:34 akochkov-linux /usr/libexec/gdm-wayland-session[2144]: dbus-daemon[2144]: [session uid=1000 pid=2144] Activated service 'org.freedesktop.systemd1' failed: Process org.freedesktop.systemd1 exited with status 1
Nov 27 14:26:45 akochkov-linux /usr/libexec/gdm-wayland-session[2144]: dbus-daemon[2144]: [session uid=1000 pid=2144] Activating service name='org.freedesktop.systemd1' requested by ':1.856' (uid=1000 pid=142648 comm="/usr/bin/crun --systemd-cgroup create --bundle /va" label="unconfined_u:system_r:container_runtime_t:s0-s0:c0.c1023")
Nov 27 14:26:45 akochkov-linux /usr/libexec/gdm-wayland-session[2144]: dbus-daemon[2144]: [session uid=1000 pid=2144] Activated service 'org.freedesktop.systemd1' failed: Process org.freedesktop.systemd1 exited with status 1
Nov 27 14:26:45 akochkov-linux podman[142545]: 2020-11-27 14:26:45.853326615 +0800 CST m=+11.301155352 image build  
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: file:///usr/share/plasma/plasmoids/org.kde.plasma.taskmanager/contents/ui/Task.qml:285:5: QML Connections: Implicitly defined onFoo properties in Connections are deprecated. Use this syntax instead: function onFoo(<arguments>) { ... }
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: qt.qpa.wayland: Wayland does not support QWindow::requestActivate()
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for GroupDialog_QMLTYPE_364(0x55ddb4186640)
Nov 27 14:26:49 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for GroupDialog_QMLTYPE_364(0x55ddb4186640)
Nov 27 14:27:02 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:27:02 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:27:02 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:27:05 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:27:05 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)
Nov 27 14:27:05 akochkov-linux plasmashell[3139]: kf.plasma.quick: Couldn't create KWindowShadow for ToolTipDialog(0x55ddb3cfd720)

It might be related to Wayland active, see als https://bugzilla.redhat.com/show_bug.cgi?id=1877228

rhatdan commented 3 years ago

This seems to work correctly in current release, reopen if I am mistaken.