Package: podman
Version: 4.1.0+ds2-2
Severity: important
X-Debbugs-Cc: wa...@debian.org
podman currently fails to create any container as root. It always fails
with:
| % sudo podman run --rm --network host debian:sid-slim
| Error: container create failed (no logs from conmon): conmon bytes "":
readObjectStart: expect { or n, but found , error found in #0 byte of ...||...,
bigger context ...||...
Internally, crun fails after a quick check of /proc/self/uid_map, but is
silent why.
| openat(AT_FDCWD,
"/sys/fs/cgroup/machine.slice/libpod-45964672ec0043cbf4908f23824ae0a4cf1b5d244fbd72e9ace8c396beb38b25.scope/container",
O_RDONLY|O_DIRECTORY) = 6
| geteuid() = 0
| openat(AT_FDCWD, "/proc/self/uid_map", O_RDONLY) = 7
| statx(7, "", AT_STATX_DONT_SYNC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH,
STATX_SIZE, {stx_mask=STATX_BASIC_STATS|STATX_MNT_ID, stx_attributes=0,
stx_mode=S_IFREG|0644, stx_size=0, ...}) = 0
| read(7, " 0 0 4294967295\n", 4096) = 33
| read(7, "", 8159) = 0
| close(7) = 0
| close(6) = 0
| kill(3729, SIGKILL) = 0
Bastian
-- System Information:
Debian Release: bookworm/sid
APT prefers testing
APT policy: (700, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 5.17.0-3-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages podman depends on:
ii conmon 2.1.0+ds1-1
ii containernetworking-plugins 1.1.0+ds1-1+b1
ii crun 0.17+dfsg-1.1+b1
ii golang-github-containers-common 0.44.5+ds1-1
ii libc6 2.33-7
ii libdevmapper1.02.1 2:1.02.175-2.1
ii libgpgme11 1.16.0-1.2
ii libseccomp2 2.5.4-1
Versions of packages podman recommends:
ii buildah 1.23.1+ds1-2+b1
pn catatonit | tini | dumb-init <none>
ii fuse-overlayfs 1.8.2-1
pn golang-github-containernetworking-plugin-dnsname <none>
ii slirp4netns 1.0.1-2
ii uidmap 1:4.11.1+dfsg1-2
Versions of packages podman suggests:
pn containers-storage <none>
pn docker-compose <none>
ii iptables 1.8.8-1
-- no debconf information
