Package: crun
Version: 1.8.1-1+b1
Severity: normal
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
The release of kernel 6.1.0-13 (6.1.55) included a change ('attr: block mode
changes of symlinks') which
breaks running containers that use systemd (like Debian itself) as
the init system.
This issue was recognized on the crun issue tracker:
1. https://github.com/containers/crun/issues/1308
2. https://github.com/containers/crun/pull/1309
Reproduction instructions are here:
1. https://github.com/containers/crun/issues/1308#issuecomment-1731077226
The offending kernel commit is here:
1.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5d1f903f75a80daa4dfb3d84e114ec8ecbf29956
Which shows up in this changelog:
1.
https://metadata.ftp-master.debian.org/changelogs//main/l/linux-signed-amd64/linux-signed-amd64_6.1.55+1_changelog
The end result is that running the current version of crun with
kernel 6.1.0-13 (6.1.55) means that containers using systemd as their
init system will fail to run with an error like the following:
'Error: OCI runtime error: crun: chmod `run/shm`: Operation not supported'
* What exactly did you do (or not do) that was effective (or
ineffective)?
I ran a container that uses systemd as an init system, following
the instructions listed here:
https://github.com/containers/crun/issues/1308#issuecomment-1731077226
* What was the outcome of this action?
An error message like the following:
'Error: OCI runtime error: crun: chmod `run/shm`: Operation not supported'
* What outcome did you expect instead?
The container to run properly.
*** End of the template - remove these template lines ***
-- System Information:
Debian Release: 12.2
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.1.0-13-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages crun depends on:
ii libc6 2.36-9+deb12u3
ii libcap2 1:2.66-4
ii libseccomp2 2.5.4-1+b3
ii libsystemd0 252.17-1~deb12u1
ii libyajl2 2.1.0-3+deb12u2
crun recommends no packages.
crun suggests no packages.
-- no debconf information
