Hi Shengjing,

On Sun, 19 Jun 2022 15:28:32 +0800 Shengjing Zhu <z...@debian.org> wrote:
> Can someone checks if you still fail to run rootless container with
> runc and podman 4.1?
>
> I think it's because
> https://github.com/containers/podman/issues/13731, which is fixed in
> podman 4.1.
> And it's caused by systemd 250 which changes OOMScoreAdjust in user@.service

I just tried, and it seems that indeed, podman 4.1 fixes the issue. Here are the steps I followed:

1) I removed the package crun, so that I only have runc installed:

    $ sudo apt purge crun

2) From this point, I can reproduce the issue:

    $ podman run --rm -it kali-rolling
    Error: OCI runtime error: runc create failed: unable to start container process: can't get final child's PID from pipe: EOF

3) Now I install podman from experimental:

    $ sudo apt install -t experimental podman
    Get:1 http://deb.debian.org/debian experimental/main amd64 golang-github-containers-common all 0.48.0+ds1-1 [34.5 kB]     Get:2 http://deb.debian.org/debian experimental/main amd64 podman amd64 4.1.0+ds2-2 [9,997 kB]     Get:3 http://deb.debian.org/debian experimental/main amd64 buildah amd64 1.26.1+ds1-1 [6,041 kB]

4) Tried to run podman rootless again:

    $ podman run --rm -it kali-rolling
    ┌──(root㉿633e94a0ebde)-[/]
    └─#

It works!

Thanks,

--
Arnaud Rebillout / Offensive Security / Kali Linux Developer

Reply via email to