tesujimath / rktrunner

rkt run front-end for unprivileged users
Apache License 2.0
1 stars 0 forks source link

When run setuid root, rkt error with stage1/rootfs/usr/bin/systemd-nspawn #1

Closed tesujimath closed 7 years ago

tesujimath commented 7 years ago

The program more-or-less works when run as sudo root, but when run as setuid root, produces the following error message:

stage1/rootfs/usr/bin/systemd-nspawn: error while loading shared libraries: libsystemd-shared-231.so: cannot open shared object file: No such file or directory
tesujimath commented 7 years ago

Running as sudo:

inscrutable$ grep ^NAME /etc/os-release
NAME="CentOS Linux"
inscrutable$ sudo $HOME/go/bin/rkt-run --interactive --verbose docker://quay.io/biocontainers/blast:2.6.0--boost1.61_0
/usr/bin/rkt --insecure-options=image run --interactive --set-env=HOME=/home/root --volume home,kind=host,source=/root --volume dataset,kind=host,source=/dataset --volume bifo,kind=host,source=/bifo docker://quay.io/biocontainers/blast:2.6.0--boost1.61_0 --mount volume=home,target=/home/root --mount volume=dataset,target=/dataset --mount volume=bifo,target=/bifo --user=0 --user=0 --exec bash
bash-4.2# grep ^NAME /etc/os-release
grep ^NAME /etc/os-release
NAME=Buildroot
bash-4.2# exit

Running as setuid root:

inscrutable$ sudo chown root:root $HOME/go/bin/rkt-run; sudo chmod 04755 $HOME/go/bin/rkt-run; ls -l $HOME/go/bin/rkt-run
-rwsr-xr-x 1 root root 3130088 Apr  7 16:38 /home/guestsi/go/bin/rkt-run
inscrutable$ $HOME/go/bin/rkt-run --interactive --verbose docker://quay.io/biocontainers/blast:2.6.0--boost1.61_0
/usr/bin/rkt --insecure-options=image run --interactive --set-env=HOME=/home/guestsi --volume home,kind=host,source=/home/guestsi --volume dataset,kind=host,source=/dataset --volume bifo,kind=host,source=/bifo docker://quay.io/biocontainers/blast:2.6.0--boost1.61_0 --mount volume=dataset,target=/dataset --mount volume=bifo,target=/bifo --mount volume=home,target=/home/guestsi --user=511 --user=511 --exec bash
stage1/rootfs/usr/bin/systemd-nspawn: error while loading shared libraries: libsystemd-shared-231.so: cannot open shared object file: No such file or directory