Package: podman
Version: 2.0.3+dfsg1-1
Followup-For: Bug #966093

Dear Robby and Maintainer,

while I can confirm `podman` doesn't correctly execute the `crun` runtime when
started from a regular user, after executing the following command from the
user's shell:

  $ echo 'runtime = "crun"' >  ~/.config/containers/libpod.conf

both

  $ podman info

and the suggested

  $ podman run -it debian:sid

run correctly for a regular user, only if the administrator correctly enabled
the  kernel.unprivileged_userns_clone sysctl via manually running

  $ sudo sysctl -w kernel.unprivileged_userns_clone=1

or setting it in /etc/sysctl.conf or in a /etc/sysctl.d/ snippet (I think this
should be documented also in podman's README.Debian as well as in buildah's)

Thank you all.



-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (777, 'testing'), (666, 'stable'), (333, 'oldstable'), (222, 
'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.7.0-1-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages podman depends on:
ii  conmon                       2.0.9-1
ii  containernetworking-plugins  0.8.6-2
ii  crun                         0.14.1+dfsg-1
ii  init-system-helpers          1.58
ii  libc6                        2.31-2
ii  libdevmapper1.02.1           2:1.02.167-1+b1
ii  libgpgme11                   1.13.1-9
ii  libseccomp2                  2.4.3-1+b1
ii  runc                         1.0.0~rc10+dfsg2-1

Versions of packages podman recommends:
ii  buildah         1.15.0-4
ii  fuse-overlayfs  1.0.0-1
ii  slirp4netns     1.0.1-1
ii  tini            0.18.0-1+b1
ii  uidmap          1:4.8.1-1

Versions of packages podman suggests:
ii  containers-storage  1.21.2+dfsg1-1

-- debconf-show failed

Reply via email to