Closed GolanTrevize10 closed 1 year ago
Try to break it down into individual commands.
ctr=$(buildah from ubi8) buildah run $ctr echo hello
I am using podman not buildah directly. And I am building a Dockerfile
Ok it is a non-privileged container, so you will not work. Please read https://www.redhat.com/sysadmin/podman-inside-kubernetes
@rhatdan there is a section in that document you shared explaning how to run podman in a non-privileged container. So it is possible.
After investigating a bit I found out the problem is the cgroup mount in /sys/fs/cgroup/pids is read only. Any idea why?
sh-4.4# mount |grep pids cgroup on /sys/fs/cgroup/pids type cgroup (ro,nosuid,nodev,noexec,relatime,pids)
Nope. I am not a k8s expert. @umohnani8 PTAL
I found the issue. I was not using isolation chroot
Description
I am running rootful podman in a non-privileged container in Kubernetes. If I try to run a container with podman it works correctly, but when I try to build an image I get this error
I suspect it has something to do with apparmor, but I cannot see anything in our apparmor profile
Output of
rpm -q podman
:Output of
podman version
:*Output of `cat /etc/release`:**
Output of
uname -a
:Output of
cat /etc/containers/storage.conf
:Output of
podman info
: