rootless-containers / usernetes

Kubernetes without the root privileges
https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/2033-kubelet-in-userns-aka-rootless
Apache License 2.0
855 stars 58 forks source link

Problem when cri-o is already installed on the system #253

Closed lucabe72 closed 10 months ago

lucabe72 commented 2 years ago

Hi all,

I tried the latest usernetes release, and I had problems starting it. After some investigation, it turned out that the "u7s-rootlesskit" service failed to start, because crio complained "open /var/lib/crio/.version424976977: permission denied". I think this happened because my test system already had cri-o installed, so the /var/lib/crio directory already exists, and the "--copy-up /var/lib" option passed to rootlesskit created a symbolic link to such a directory... So, the usernetes' cri-o was not able to write there.

After removing /var/lib/crio from my system, usernetes started regularly.

Is this a known issue, am I doing something wrong (maybe I misconfigured something?), or something else?

Thanks, Luca

AkihiroSuda commented 2 years ago

Probably we have to add /var/lib/crio to this line https://github.com/rootless-containers/usernetes/blob/f39f23d4a248b7c1a42839ffc891afcb0a50bd17/boot/rootlesskit.sh#L77

lucabe72 commented 2 years ago

On Fri, 21 Jan 2022 at 08:19, Akihiro Suda @.***> wrote:

Probably we have to add /var/lib/crio to this line

https://github.com/rootless-containers/usernetes/blob/f39f23d4a248b7c1a42839ffc891afcb0a50bd17/boot/rootlesskit.sh#L77

This worked perfectly, thank you very much! Problem solved :)

Luca

— Reply to this email directly, view it on GitHub https://github.com/rootless-containers/usernetes/issues/253#issuecomment-1018246392, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABAL5YOWRU65UI34XOA4SHLUXECIPANCNFSM5MJXQ4PA . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you authored the thread.Message ID: @.***>