This now affects GitHub Actions. The ubuntu-latest runner is moving to 26.04 (rollout Oct 19 - Nov 19), and CI that runs rootless "podman compose down" fails with "rootless netns: kill network process: permission denied". CoreOS already pinned two projects to 24.04 because of it: https://github.com/coreos/ignition/pull/2351 https://github.com/coreos/bootupd/pull/1179
Reported it in https://github.com/actions/runner-images/issues/15182 with a repro on the hosted runners (fails on 26.04, works on 24.04) Also reproduced on 26.10 (podman 5.8.6, passt 0.0~git20260728.f8df3f1-1, apparmor 6.0.0~alpha1-0ubuntu4) and "podman unshare --rootless-netns true" fails with the same denial. Is anyone working on a fix? is the approach from comment #6 (podman- specific pasta profile with a transition) still the preferred approachj? Could test any candidate fix against the repro if that helps. ** Bug watch added: github.com/actions/runner-images/issues #15182 https://github.com/actions/runner-images/issues/15182 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2154379 Title: pasta is not allowed to receive signals from podman due to apparmor To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2154379/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
