Questions tagged [rootless]

72 questions
0
votes
1 answer

Podman: using netavark for rootless networking

I am running podman 4.4.1 on RHEL 8.6 Real-time. I have been having latency issues with the default CNI network in rootless containers and am trying to evaluate netavark as a backend. What I have tried: I ran podman system reset --force I changed…
Gordon
  • 170
  • 3
  • 18
0
votes
0 answers

Unable to run dind-rootless with a non-root user id

I am trying to run a multi-process container which has docker daemon and jupyter lab running as process inside it. For this, I am using s6-overlay to run jupyterlab as a service and specifying the dockerd-entrypoint.sh as the executable command. My…
bornidiot
  • 1
  • 2
0
votes
0 answers

Attempting to run a bind9 server using containerd and nerdctl and my instance refuses to listen on port 53

I'm attempting to run bind9 on my system to mess with DNS, with the plan to get this setup the same way on a rpi and host it in my network at home. The service starts up just fine according to logs and can even perform DNS lookups using my…
0
votes
1 answer

How to replace `securityContext: privileged: true` in Kubernetes for DinD (docker in docker)

If we want to to build OCI container images with docker and e.g. want to the following pod setup: apiVersion: v1 kind: Pod metadata: name: dind spec: containers: - name: build image: docker:23.0.1-cli command: - cat …
Gabriel
  • 8,990
  • 6
  • 57
  • 101
0
votes
0 answers

Setting up Jenkins Docker Agent with rootless docker for daemon and client - permission issues inside agent container

We are trying to setup a new host for Jenkins Docker agent with rootless setup. We already have a CI/CD pipe with the same scheme, except its not running rootless and due to security requierments, we need to transition to a rootless docker setup.…
0
votes
0 answers

"rootless" docker gets permission denied, but account running docker does not - why?

I am running docker "rootless" according to this guide: https://docs.docker.com/engine/security/rootless/ The user which actually runs docker is svc_test. When I try and start a docker container which has diretory mounts which don't exists - the…
Newskooler
  • 3,973
  • 7
  • 46
  • 84
0
votes
1 answer

Behavior of podman:4.2.0 without privileged create folder with d---------

My Dockerfile, FROM quay.io/podman/stable:v4.2.0 USER podman RUN mkdir -p /home/podman/.local/share/containers $podman build -t test . $podman volume create vol2 $podman run -it --device /dev/fuse -v vol2:/home/podman/.local/share/containers:z…
uniwinux
  • 19
  • 5
0
votes
2 answers

podman-rootless-no-privileged in openshift

I was able to run podman-rootless-no-privileged v4.2.0 in the VM, [regular-user@localhost ~]$ podman run -u podman quay.io/podman/stable echo 'FROM busybox' > /tmp/Dockerfile && echo 'RUN echo hello' >> /tmp/Dockerfile && podman build -t test…
uniwinux
  • 19
  • 5
0
votes
1 answer

How to use the DBus system in a container with docker root-less

I would like to use DBus in a container with docker in root-less mode. I use Ubuntu 22.10 : host$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 22.10 Release: 22.10 Codename: kinetic and docker…
Wolfy
  • 1
  • 1
0
votes
0 answers

"Too many open files" error during backward ingest of data in influxdb v2 on rootless containerd

I am trying to figure out how resource limits in rootless container environments are handled. I am running influxdb:latest (tried :alpine as well) as a rootless container with nerdctl and containerd an an up-to-date ubuntu host. While all other…
0
votes
1 answer

Unable to connect to Oracle DB from docker rootless

I've created a docker image to allow users to create containers that encapsulate all of the required libraries to connect seamlessly to our oracle database. Everything works fine except when I switch to docker rootless, then, whenever I try to…
Zarp
  • 1
  • 2
0
votes
1 answer

Install Traefik in Docker rootless: 404 page not found

I have installed Docker rootless on a Debian VM in Proxmox. I tried some Docker containers without any problem, and cleaned all (with prune) to install the Traefik Docker container first. Before installing Traefik, I have exposed the privileged…
Serfoo
  • 1
  • 3
0
votes
0 answers

Enable command completion for docker rootless

I installed docker rootless on my raspberry pi 4 and it works fine but command completion does not work. For example typing: docker imag And then pressing TAB does nothing. How can I enable command completion for docker rootless? Thanks!
0
votes
1 answer

Rootless podman: use nfs mount

i found this question first which is similar: How to mount an NFS share with rootless Podman? long story short i am having trouble with rootless podman nfs volume. i am creating the volume with myuser podman volume create --opt type=nfs4 --opt o=rw…
Quardah
  • 183
  • 1
  • 4
  • 14
0
votes
0 answers

How to access containerd from client when started rootless?

I'm trying to create a connection to containerd in Rust containerd_client. Using the code sample they gave, which I listed below, I'm getting "permission denied error". If I try "ctr images list", I get the same error. But "sudo ctr images list"…
Julia
  • 21
  • 3