Re: Docker and user namespaces on F30

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Sadly this doesn't work either. With podman, I have this error:
ERRO[0004] Error pulling image ref //php:7-fpm-alpine: Error committing
the finished image: error adding layer with blob
"sha256:f581654c6ada4fba71ebfbfe4cd96430abe7b5dabebd92a6a62c11391a79cc9
8": Error processing tar file(exit status 1): there might not be enough
IDs available in the namespace (requested 82:82 for /home/www-data):
lchown /home/www-data: invalid argument 
Failed
Error: unable to pull docker.io/php:7-fpm-alpine: unable to pull image:
Error committing the finished image: error adding layer with blob
"sha256:f581654c6ada4fba71ebfbfe4cd96430abe7b5dabebd92a6a62c11391a79cc9
8": Error processing tar file(exit status 1): there might not be enough
IDs available in the namespace (requested 82:82 for /home/www-data):
lchown /home/www-data: invalid argument

Which looks even stranger.

I see we don't have the same version of docker. I have version 18.06.3,
build d7080c1. Did you install docker from 
https://docs.docker.com/install/ ?

-- 
Julien Enselme
http://www.jujens.eu/

Je lun, 2019-05-06 je 16:17 +0200, Jun Aruga skribis:
> Podman 1.2 and Docker CE 18.09.5 on My Fedora 30 work for your use
> case.
> 
> $ rpm -q kernel
> kernel-5.0.5-200.fc29.x86_64
> kernel-5.0.10-200.fc29.x86_64
> kernel-5.0.10-300.fc30.x86_64
> 
> $ podman --version
> podman version 1.2.0
> 
> $ podman run -it --rm docker.io/php:7-fpm-alpine sh
> /var/www/html # uname -a
> Linux f8b9dafd7816 5.0.10-300.fc30.x86_64 #1 SMP Tue Apr 30 16:22:12
> UTC 2019 x86_64 Linux
> 
> $ docker --version
> Docker version 18.09.5, build e8ff056
> 
> $ docker run -it --rm docker.io/php:7-fpm-alpine sh
> /var/www/html # uname -a
> Linux 936e897b0a9b 5.0.10-300.fc30.x86_64 #1 SMP Tue Apr 30 16:22:12
> UTC 2019 x86_64 Linux
> 
> On Sat, May 4, 2019 at 5:05 PM Julien Enselme <jujens@xxxxxxxxx>
> wrote:
> > Hi,
> > 
> > I just updated to F30 and my docker setup with user namespaces
> > doesn't
> > work anymore. When I try to run:
> > docker run -it --rm docker.io/php:7-fpm-alpine sh
> > I get this error:
> > docker: Error response from daemon: OCI runtime create failed:
> > container_linux.go:348: starting container process caused
> > "process_linux.go:402: container init caused \"rootfs_linux.go:58:
> > mounting \\\"mqueue\\\" to rootfs
> > \\\"/var/lib/docker/1000.1001/btrfs/subvolumes/38ce5c87e31bbbcec010
> > db85
> > 383d1af57e8652ff4e4c411cebe0c2102a36a020\\\" at \\\"/dev/mqueue\\\"
> > caused \\\"operation not permitted\\\"\"": unknown.
> > 
> > I tried to disable SELinux with setenforce 0 but got the same
> > result.
> > 
> > However, dk run --userns=host -it --rm docker.io/php:7-fpm-alpine
> > sh
> > works fine. So it seems to be limited to user namespaces.
> > 
> > My kernel: 5.0.9-301.fc30.x86_64
> > 
> > Any ideas on where this may come from? This worked fine on F29 (and
> > probably on older versions too, I have this setup for a while now).
> > 
> > Regards,
> > --
> > Julien Enselme
> > http://www.jujens.eu/
> > _______________________________________________
> > devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
> > To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: 
> > https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: 
> > https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
> 
> 
> -- 
> Jun Aruga / He - His - Him
> jaruga@xxxxxxxxxx / IRC: jaruga
> _______________________________________________
> devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: 
> https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux