Public bug reported:

Ubuntu 18.04.4. with Podman getting OCI runtime permission denied error

While installing podman on Ubuntu 18.04.1 I get this error msg:

STEP 19: CMD ["batch"]
--> Using cache 6a4998c7b02676feaa68a0865618312b635a648a062d21600b1fd7646f645377
STEP 20: COMMIT opensslspeed
6a4998c7b02676feaa68a0865618312b635a648a062d21600b1fd7646f645377
Your kernel does not support swap limit capabilities,or the cgroup is not 
mounted. Memory limited without swap.
Error: container_linux.go:346: starting container process caused 
"process_linux.go:449: container init caused \"process_linux.go:415: setting 
cgroup config for procHooks process caused \\\"failed to write -1 to 
memory.memsw.limit_in_bytes: open 
/sys/fs/cgroup/memory/machine.slice/libpod-100fc7a4b680e23e1050b2b00a2adaf58ac44bb68910637e0e47b895dd61f75d.scope/memory.memsw.limit_in_bytes:
 permission denied\\\"\"": OCI runtime permission denied error


uname -a
Linux m42lp19 4.15.0-29-generic #31-Ubuntu SMP Tue Jul 17 15:42:24 UTC 2018 
s390x s390x s390x GNU/Linux

podman info
host:
  BuildahVersion: 1.11.3
  CgroupVersion: v1
  Conmon:
    package: 'conmon: /usr/bin/conmon'
    path: /usr/bin/conmon
    version: 'conmon version 2.0.3, commit: unknown'
  Distribution:
    distribution: ubuntu
    version: "18.04"
  MemFree: 14549913600
  MemTotal: 16869208064
  OCIRuntime:
    name: runc
    package: 'cri-o-runc: /usr/lib/cri-o-runc/sbin/runc'
    path: /usr/lib/cri-o-runc/sbin/runc
    version: 'runc version spec: 1.0.1-dev'
  SwapFree: 0
  SwapTotal: 0
  arch: s390x
  cpus: 20
  eventlogger: journald
  hostname: m42lp19
  kernel: 4.15.0-29-generic
  os: linux
  rootless: false
  uptime: 6h 47m 47.24s (Approximately 0.25 days)
registries:
  blocked: null
  insecure: null
  search:
  - docker.io
  - registry.fedoraproject.org
  - registry.access.redhat.com
store:
  ConfigFile: /etc/containers/storage.conf
  ContainerStore:
    number: 0
  GraphDriverName: overlay
  GraphOptions: {}
  GraphRoot: /var/lib/containers/storage
  GraphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "true"
    Supports d_type: "true"
    Using metacopy: "false"
  ImageStore:
    number: 36
  RunRoot: /var/run/containers/storage
  VolumePath: /var/lib/containers/storage/volumes
 
Contact Information = danijel.so...@de.ibm.com 
 
---uname output---
Linux m42lp19 4.15.0-29-generic #31-Ubuntu SMP Tue Jul 17 15:42:24 UTC 2018 
s390x s390x s390x GNU/Linux
 
Machine Type = z14 lpar 
 
---Debugger---
A debugger is not configured
 
---Steps to Reproduce---
  
sudo apt update && sudo apt upgrade
apt -y install software-properties-common
add-apt-repository -y ppa:projectatomic/ppa
apt -y install podman
curl 
https://raw.githubusercontent.com/projectatomic/registries/master/registries.fedora
 -o /etc/containers/registries.conf
sudo curl 
https://raw.githubusercontent.com/containers/skopeo/master/default-policy.json 
-o /etc/containers/policy.json
podman build --tag opensslspeed -f opensslspeed/Dockerfile && podman run -m 
1024m --cpus=2 --rm -it opensslspeed

All steps from the Dockerfile are executed fine, the "Commit" steps
breaks.

 
Userspace tool common name: podman 
 
The userspace tool has the following bit modes: 64 

Userspace rpm: podman/bionic,now 1.6.2-1~ubuntu18.04~ppa1 s390x

Userspace tool obtained from project website:  na 
 
*Additional Instructions for danijel.so...@de.ibm.com:
-Attach ltrace and strace of userspace application.


This looks to be the same issue as

https://github.com/containers/crun/issues/187

i.e. Ubuntu needs to update to at least podman 1.6.3 or later.

** Affects: linux (Ubuntu)
     Importance: Undecided
     Assignee: Skipper Bug Screeners (skipper-screen-team)
         Status: New


** Tags: architecture-s39064 bugnameltc-184012 severity-medium 
targetmilestone-inin---

** Tags added: architecture-s39064 bugnameltc-184012 severity-medium
targetmilestone-inin---

** Changed in: ubuntu
     Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team)

** Package changed: ubuntu => linux (Ubuntu)

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1864163

Title:
  Ubuntu 18.04.4. with Podman getting OCI runtime permission denied
  error

Status in linux package in Ubuntu:
  New

Bug description:
  Ubuntu 18.04.4. with Podman getting OCI runtime permission denied
  error

  While installing podman on Ubuntu 18.04.1 I get this error msg:

  STEP 19: CMD ["batch"]
  --> Using cache 
6a4998c7b02676feaa68a0865618312b635a648a062d21600b1fd7646f645377
  STEP 20: COMMIT opensslspeed
  6a4998c7b02676feaa68a0865618312b635a648a062d21600b1fd7646f645377
  Your kernel does not support swap limit capabilities,or the cgroup is not 
mounted. Memory limited without swap.
  Error: container_linux.go:346: starting container process caused 
"process_linux.go:449: container init caused \"process_linux.go:415: setting 
cgroup config for procHooks process caused \\\"failed to write -1 to 
memory.memsw.limit_in_bytes: open 
/sys/fs/cgroup/memory/machine.slice/libpod-100fc7a4b680e23e1050b2b00a2adaf58ac44bb68910637e0e47b895dd61f75d.scope/memory.memsw.limit_in_bytes:
 permission denied\\\"\"": OCI runtime permission denied error

  
  uname -a
  Linux m42lp19 4.15.0-29-generic #31-Ubuntu SMP Tue Jul 17 15:42:24 UTC 2018 
s390x s390x s390x GNU/Linux

  podman info
  host:
    BuildahVersion: 1.11.3
    CgroupVersion: v1
    Conmon:
      package: 'conmon: /usr/bin/conmon'
      path: /usr/bin/conmon
      version: 'conmon version 2.0.3, commit: unknown'
    Distribution:
      distribution: ubuntu
      version: "18.04"
    MemFree: 14549913600
    MemTotal: 16869208064
    OCIRuntime:
      name: runc
      package: 'cri-o-runc: /usr/lib/cri-o-runc/sbin/runc'
      path: /usr/lib/cri-o-runc/sbin/runc
      version: 'runc version spec: 1.0.1-dev'
    SwapFree: 0
    SwapTotal: 0
    arch: s390x
    cpus: 20
    eventlogger: journald
    hostname: m42lp19
    kernel: 4.15.0-29-generic
    os: linux
    rootless: false
    uptime: 6h 47m 47.24s (Approximately 0.25 days)
  registries:
    blocked: null
    insecure: null
    search:
    - docker.io
    - registry.fedoraproject.org
    - registry.access.redhat.com
  store:
    ConfigFile: /etc/containers/storage.conf
    ContainerStore:
      number: 0
    GraphDriverName: overlay
    GraphOptions: {}
    GraphRoot: /var/lib/containers/storage
    GraphStatus:
      Backing Filesystem: extfs
      Native Overlay Diff: "true"
      Supports d_type: "true"
      Using metacopy: "false"
    ImageStore:
      number: 36
    RunRoot: /var/run/containers/storage
    VolumePath: /var/lib/containers/storage/volumes
   
  Contact Information = danijel.so...@de.ibm.com 
   
  ---uname output---
  Linux m42lp19 4.15.0-29-generic #31-Ubuntu SMP Tue Jul 17 15:42:24 UTC 2018 
s390x s390x s390x GNU/Linux
   
  Machine Type = z14 lpar 
   
  ---Debugger---
  A debugger is not configured
   
  ---Steps to Reproduce---
    
  sudo apt update && sudo apt upgrade
  apt -y install software-properties-common
  add-apt-repository -y ppa:projectatomic/ppa
  apt -y install podman
  curl 
https://raw.githubusercontent.com/projectatomic/registries/master/registries.fedora
 -o /etc/containers/registries.conf
  sudo curl 
https://raw.githubusercontent.com/containers/skopeo/master/default-policy.json 
-o /etc/containers/policy.json
  podman build --tag opensslspeed -f opensslspeed/Dockerfile && podman run -m 
1024m --cpus=2 --rm -it opensslspeed

  All steps from the Dockerfile are executed fine, the "Commit" steps
  breaks.

   
  Userspace tool common name: podman 
   
  The userspace tool has the following bit modes: 64 

  Userspace rpm: podman/bionic,now 1.6.2-1~ubuntu18.04~ppa1 s390x

  Userspace tool obtained from project website:  na 
   
  *Additional Instructions for danijel.so...@de.ibm.com:
  -Attach ltrace and strace of userspace application.

  
  This looks to be the same issue as

  https://github.com/containers/crun/issues/187

  i.e. Ubuntu needs to update to at least podman 1.6.3 or later.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1864163/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to