eWaterCycle / setup-singularity

GitHub action to setup singularity
Apache License 2.0
16 stars 2 forks source link

Failed to create user namespace: user namespace requires to set /proc/sys/kernel/unprivileged_userns_clone to 1 #7

Open nickp60 opened 2 years ago

nickp60 commented 2 years ago

Hello! Thank for making this action! I am close to getting it working for my project, but am running into the following error message. The setup-singularity action step completes fine, but when subsequent steps attempt to run singularity containers I get the following error:

Activating singularity image /github/workspace/.singularity/be463e8ff7ab6a778774f91d2bfa1a1d.simg
INFO:    Converting SIF file to temporary sandbox...
FATAL:   while extracting /github/workspace/.singularity/be463e8ff7ab6a778774f91d2bfa1a1d.simg: root filesystem extraction failed: extract command failed: ERROR  : Failed to create user namespace: user namespace requires to set /proc/sys/kernel/unprivileged_userns_clone to 1

Googling has been unproductive so far. I tried adding --fakeroot to the singularity command to no avail. I am trying to have the action run through a snakemake pipeline where each task is executed with a container, so I don't have the exact invovation unfortunately. The test invocation singularity run docker://alpine cat /etc/os-release runs fine without error.

Its a long shot, but have you come across something like this before?

funnell commented 2 years ago

for reference, here is an issue where someone was able to resolve that error message: https://github.com/TACC/Lmod/issues/510#issuecomment-815426236