aptible / aptible/supercronic

Triggered Process has insufficient write Permissions to /var/run

Open
#219 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
2.6k
Forks
147
PR merge metrics
No merged PRs in 30d

Description

I am using my [docker-sync-registries](https://github.com/luckylinux/docker-sync-registries) to create a local Mirror based on a list of Docker Container Images.

Relatively recently I implemented also a Lock File in the Application, to avoid running the Synchronization in Case where the Synchronization is already running. The Lock File is written by the Python Application to a File `/var/run/sync-registries.lock`.

When running under Supercronic, there is a Permission Issue, which I cannot really understand though:
```
Feb 15 07:07:19 HOST.MYDOMAIN.TLD podman[1899061]: 2026-02-15 07:07:19.562410729 +0100 CET m=+0.152475632 container create 28662ee6bbc15eccaa265044d6c5aebe73ca75e7e67927fde96e46b5165bfe24 (image=localhost/docker-sync-registries:debian-latest, name=docker-sync-registries-application, pod_id=9663d038ad408f144a99fe5fd72c07801142d9382f1c7730af2800e2c3d49871, PODMAN_SYSTEMD_UNIT=docker-sync-registries-application.service, io.buildah.version=1.42.2)
Feb 15 07:07:19 HOST.MYDOMAIN.TLD podman[1899061]: 2026-02-15 07:07:19.472533993 +0100 CET m=+0.062598906 image pull dac4dbca9632a4345f537551d4c5f3498db0f8f66830fa4e133f873b5a7ba0d4 localhost/docker-sync-registries:debian-latest
Feb 15 07:07:19 HOST.MYDOMAIN.TLD podman[1899061]: 2026-02-15 07:07:19.706863708 +0100 CET m=+0.296928611 container init 28662ee6bbc15eccaa265044d6c5aebe73ca75e7e67927fde96e46b5165bfe24 (image=localhost/docker-sync-registries:debian-latest, name=docker-sync-registries-application, pod_id=9663d038ad408f144a99fe5fd72c07801142d9382f1c7730af2800e2c3d49871, PODMAN_SYSTEMD_UNIT=docker-sync-registries-application.service, io.buildah.version=1.42.2)
Feb 15 07:07:19 HOST.MYDOMAIN.TLD systemd[918]: Started docker-sync-registries-application.service - Docker Sync Registries Application Container.
░░ Subject: A start job for unit UNIT has finished successfully
░░ Defined-By: systemd
░░ Support: https://lists.freedesktop.org/mailman/listinfo/systemd-devel
░░
░░ A start job for unit UNIT has finished successfully.
░░
░░ The job identifier is 23134.
Feb 15 07:07:19 HOST.MYDOMAIN.TLD podman[1899061]: 2026-02-15 07:07:19.714545781 +0100 CET m=+0.304610694 container start 28662ee6bbc15eccaa265044d6c5aebe73ca75e7e67927fde96e46b5165bfe24 (image=localhost/docker-sync-registries:debian-latest, name=docker-sync-registries-application, pod_id=9663d038ad408f144a99fe5fd72c07801142d9382f1c7730af2800e2c3d49871, PODMAN_SYSTEMD_UNIT=docker-sync-registries-application.service, io.buildah.version=1.42.2)
Feb 15 07:07:19 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899061]: 28662ee6bbc15eccaa265044d6c5aebe73ca75e7e67927fde96e46b5165bfe24
Feb 15 07:07:19 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: Starting Infinite Loop
Feb 15 07:07:19 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:07:19+01:00" level=warning msg="process reaping disabled, not pid 1"
Feb 15 07:07:19 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:07:19+01:00" level=info msg="read crontab: /etc/supercronic/crontab"
Feb 15 07:10:00 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:00+01:00" level=info msg=starting iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg="Traceback (most recent call last):" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" File \"/opt/app/sync.py\", line 1091, in " channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" app.run()" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" ~~~~~~~^^" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" File \"/opt/app/sync.py\", line 573, in run" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" self.set_lock()" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" ~~~~~~~~~~~~~^^" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" File \"/opt/app/sync.py\", line 414, in set_lock" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" with open(LOCK_FILE, \"w\") as lock_handle:" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg=" ~~~~^^^^^^^^^^^^^^^^" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=info msg="PermissionError: [Errno 13] Permission denied: '/var/run/sync-registries.lock'" channel=stderr iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
Feb 15 07:10:01 HOST.MYDOMAIN.TLD docker-sync-registries-application[1899123]: time="2026-02-15T07:10:01+01:00" level=error msg="error running command: exit status 1" iteration=0 job.command="bash -c \"python -u /opt/app/sync.py\"" job.position=0 job.schedule="0 0,5,10,15,20,25,30,35,40,45,50,55 * * * * *"
```

All Processes inside the Container seems to be running as the same User:
```
podman top docker-sync-registries-application user huser pid comm
USER HUSER PID COMMAND
podman podman 1 docker-entrypoi
podman podman 2 app.sh
podman podman 3 supercronic
podman podman 136 sleep
```

Running the Synchronization directly (without using Supercronic) works correctly:
```
podman@HOST:~/containers$ podman exec docker-sync-registries-application bash -c "python -u /opt/app/sync.py"
[DEBUG] Load Configuration Files from /etc/sync-registries.d
...
```

Any Idea what might be going on here ?
There is no `tmpfs` File System mounted at `/var/run` inside the Container, could that cause the Problem I'm seeing ?
```
podman@HOST:~/containers$ podman exec docker-sync-registries-application mount -l
none on /dev/mqueue type mqueue (rw,nosuid,nodev,noexec,relatime,seclabel)
sysfs on /sys type sysfs (rw,nosuid,nodev,noexec,relatime,seclabel)
securityfs on /sys/kernel/security type securityfs (rw,nosuid,nodev,noexec,relatime)
cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,seclabel,nsdelegate,memory_recursiveprot)
none on /sys/fs/pstore type pstore (rw,nosuid,nodev,noexec,relatime,seclabel)
bpf on /sys/fs/bpf type bpf (rw,nosuid,nodev,noexec,relatime,mode=700)
configfs on /sys/kernel/config type configfs (rw,nosuid,nodev,noexec,relatime)
selinuxfs on /sys/fs/selinux type selinuxfs (rw,nosuid,noexec,relatime)
fusectl on /sys/fs/fuse/connections type fusectl (rw,nosuid,nodev,noexec,relatime)
tracefs on /sys/kernel/tracing type tracefs (rw,nosuid,nodev,noexec,relatime,seclabel)
debugfs on /sys/kernel/debug type debugfs (rw,nosuid,nodev,noexec,relatime,seclabel)
devtmpfs on /dev/autofs type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/btrfs-control type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu_dma_latency type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/full type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/fuse type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/hidraw0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/hpet type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/hwrng type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/i2c-0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/kmsg type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/kvm type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/loop-control type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/mcelog type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/mem type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/null type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/nvram type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/port type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ppp type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/random type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/rfkill type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/rtc0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sda type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sda1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sda2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sda3 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sdb type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sdb1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sg0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sg1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sg2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/snapshot type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/sr0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS10 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS11 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS12 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS13 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS14 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS15 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS16 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS17 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS18 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS19 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS20 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS21 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS22 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS23 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS24 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS25 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS26 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS27 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS28 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS29 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS3 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS30 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS31 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS4 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS5 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS6 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS7 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS8 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/ttyS9 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/udmabuf type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/uhid type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/uinput type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/urandom type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/usbmon0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/usbmon1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/userfaultfd type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcs type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcs1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcs2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcs3 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcs4 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcs5 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcs6 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsa type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsa1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsa2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsa3 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsa4 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsa5 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsa6 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsu type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsu1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsu2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsu3 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsu4 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsu5 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vcsu6 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vga_arbiter type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vhci type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vhost-net type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vhost-vsock type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vmci type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vsock type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/zero type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/zram0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
/dev/sdb1 on /etc/containers type ext4 (rw,noatime,seclabel)
/dev/sdb1 on /etc/supercronic type ext4 (ro,noatime,seclabel)
/dev/sdb1 on /etc/sync-registries.d type ext4 (ro,noatime,seclabel)
/dev/sdb1 on /etc/regctl type ext4 (rw,noatime,seclabel)
shm on /dev/shm type tmpfs (rw,nosuid,nodev,noexec,relatime,context="system_u:object_r:container_file_t:s0:c123,c594",size=64000k,uid=1002,gid=1002,inode64)
tmpfs on /run/.containerenv type tmpfs (rw,nosuid,nodev,relatime,seclabel,size=389336k,nr_inodes=97334,mode=700,uid=1002,gid=1002,inode64)
tmpfs on /run/secrets type tmpfs (rw,nosuid,nodev,relatime,seclabel,size=389336k,nr_inodes=97334,mode=700,uid=1002,gid=1002,inode64)
tmpfs on /etc/hostname type tmpfs (rw,nosuid,nodev,relatime,seclabel,size=389336k,nr_inodes=97334,mode=700,uid=1002,gid=1002,inode64)
tmpfs on /etc/resolv.conf type tmpfs (rw,nosuid,nodev,relatime,seclabel,size=389336k,nr_inodes=97334,mode=700,uid=1002,gid=1002,inode64)
tmpfs on /etc/hosts type tmpfs (rw,nosuid,nodev,relatime,seclabel,size=389336k,nr_inodes=97334,mode=700,uid=1002,gid=1002,inode64)
devtmpfs on /dev/bsg/1:0:0:0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/bsg/2:0:0:0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/bsg/3:0:0:2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/dma_heap/system type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/dri/card0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/event0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/event1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/event2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/event3 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/event4 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/js0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/mice type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/mouse0 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/mouse1 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/input/mouse2 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/mapper/control type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/net/tun type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/snd/seq type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/snd/timer type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/vfio/vfio type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
/dev/sdb1 on /var/lib/sync-registries type ext4 (rw,noatime,seclabel)
/dev/sdb1 on /opt/app/delete_image_tag.sh type ext4 (ro,noatime,seclabel)
devtmpfs on /dev/cpu/0/cpuid type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu/0/msr type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu/1/cpuid type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu/1/msr type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu/2/cpuid type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu/2/msr type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu/3/cpuid type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/cpu/3/msr type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/bus/usb/001/001 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/bus/usb/001/002 type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
fuse-overlayfs on / type fuse.fuse-overlayfs (rw,nodev,noatime,user_id=0,group_id=0,default_permissions,allow_other)
proc on /proc type proc (rw,nosuid,nodev,noexec,relatime)
tmpfs on /dev type tmpfs (rw,nosuid,context="system_u:object_r:container_file_t:s0:c1022,c1023",size=65536k,mode=755,uid=655360,gid=655360,inode64)
devpts on /dev/pts type devpts (rw,nosuid,noexec,relatime,context="system_u:object_r:container_file_t:s0:c1022,c1023",gid=655365,mode=620,ptmxmode=666)
tmpfs on /sys/fs/cgroup type tmpfs (rw,relatime,seclabel,size=4k,nr_inodes=1,uid=655360,gid=655360,inode64)
cgroup2 on /sys/fs/cgroup type cgroup2 (rw,nosuid,nodev,noexec,relatime,seclabel,nsdelegate,memory_recursiveprot)
devtmpfs on /dev/null type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/zero type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/full type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/tty type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/random type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
devtmpfs on /dev/urandom type devtmpfs (rw,nosuid,noexec,seclabel,size=1976304k,nr_inodes=494076,mode=755,inode64)
```

EDIT 1: Adding `Tmpfs=/var/run:rw,size=32768k,mode=1777` to the Quadlet File made it work.

I wonder however why this is required while a direct Process Call works with the appropriate Permissions as it is already 😕.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the scheduled `bash -c "python -u /opt/app/sync.py"` command through Supercronic and compare it with the direct container execution. Inspect the reported `/var/run/sync-registries.lock` access failure and the container's process and filesystem permissions. Done means identifying whether Supercronic changes the execution context and documenting or fixing the cause.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, go
Domain
devops
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.