Public bug reported:
## Description
Non-root users cannot start containers with `apptainer` because the
`apptainer` package in resolute does not ship the necessary AppArmor
profile required to let Apptainer's `starter` binary create unprivileged
user namespaces. Without this profile, Apptainer will be denied the
ability to create the unprivileged namespaces that it requires, and the
user will see error messages emitted to stderr.
I attached the required AppArmor profile that's required to make
Apptainer work for non-root users on 26.04 to this bug report.
## Ubuntu release
26.04
## Apptainer package version
```
$ apt-cache policy apptainer
apptainer:
Installed: 1.4.5-1
Candidate: 1.4.5-1
Version table:
*** 1.4.5-1 500
500 http://archive.ubuntu.com/ubuntu resolute/universe amd64 Packages
100 /var/lib/dpkg/status
```
## What I expect to happen
```
$ apptainer exec docker://ubuntu:22.04 cat /etc/os-release
PRETTY_NAME="Ubuntu 22.04.5 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.5 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/";
SUPPORT_URL="https://help.ubuntu.com/";
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/";
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy";
UBUNTU_CODENAME=jammy
```
## What actually happens
$ apptainer exec docker://ubuntu:22.04 cat /etc/os-release
INFO: Using cached SIF image
ERROR : Could not write info to setgroups: Permission denied
ERROR : Error while waiting event for user namespace mappings: no event
received
```
** Affects: apptainer (Ubuntu)
Importance: Undecided
Status: New
** Tags: resolute
** Attachment added: "Required Apptainer AppArmor profile"
https://bugs.launchpad.net/bugs/2164911/+attachment/5994910/+files/apptainer.profile
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2164911
Title:
Non-root users cannot run containers because of missing AppArmor
profile
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apptainer/+bug/2164911/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
