Hello all. I used to use Debian with Ext4 a while ago and migrated to MicroOS with btrfs. I use LUKS disk encryption. MicroOS is giving me problems with TPM2 decryption, so I want to mix it up and migrate to Debian (no gui for server) + BFTRS + Luks. To do this I'm installing it using debootstrap.
The problem appears when I try to run a rootless podman container:If I run the command with --log-level=debug, for example the following container:I get the error:I have also tried the tags:According to this website https://docs.earthly.dev/docs/guides/podman
I don't understand what the problem is.
The rootless user I use belongs to the sudo and dialout groups.
I have tried disabling apparmor:I have rebooted and checked:Can you tell me what I can check?
I can open the 2 virtual machines in parallel, the one that works and the one that doesn't work
The problem appears when I try to run a rootless podman container:
Code:
Error: unable to start container: crun: open executable: Permission denied: OCI permission denied.Code:
$ podman run --privileged --security-opt apparmor=unconfined --rm --log-level=debug --name test --group-add keep-groups --pid=host --ipc=host docker.io/traefik/whoami:latestCode:
DEBU[0000] Received: -1Code:
--security-opt label=disable--security-opt seccomp=unconfined--security-opt unmask=allBut, if I use the Debian installer following this guide, same podman commands are working for me (although it is not the configuration I want).crun: open executable: Permission denied: OCI permission denied.
This can happen if you attempt to run (or the ENTRYPOINT references) a binary without the execution permission.
https://github.com/containers/podman/issues/9377
https://github.com/signalwire/freeswitch/pull/1748
I don't understand what the problem is.
The rootless user I use belongs to the sudo and dialout groups.
I have tried disabling apparmor:
Code:
$ sudo systemctl disable apparmorCode:
$ sudo aa-statusapparmor module is loadedI can open the 2 virtual machines in parallel, the one that works and the one that doesn't work
Statistics: Posted by juanj — 2024-09-27 15:42 — Replies 4 — Views 111