bottlerocket-os / bottlerocket-os/bottlerocket

Dockerd-rootless does not start

Open
#2,887 6 comments 2 reactions 0 assignees View on GitHub
area/kubernetes status/needs-info type/bug
Dominant language
Rust
Stars
9.7k
Forks
586
Avg merge
1d 11h
Merged PRs (30d)
11

Description

**Image I'm using:** ami-003e59b5f03f35661

Running a helm chart using docker:20.10-dind-rootless. I already checked out the solutions mentioned here: https://github.com/bottlerocket-os/bottlerocket/issues/1569 but I get this error when I try to run Dockerd inside bottlerocket:

```
exec rootlesskit \
--mtu="${DOCKERD_ROOTLESS_ROOTLESSKIT_MTU:-1500}" \
--disable-host-loopback \
--copy-up=/etc \
--copy-up=/run \
--port-driver=builtin \
--net="${DOCKERD_ROOTLESS_ROOTLESSKIT_NET:-vpnkit}" \
${DOCKERD_ROOTLESS_ROOTLESSKIT_FLAGS:-} \
"$@"

time="2023-03-13T13:23:00Z" level=warning msg="failed to mount sysfs, falling back to read-only mount: operation not permitted"
[rootlesskit:child ] error: creating tap tap0: ioctl: permission denied
```

I tried to adjust the capabilities ofc:

```
securityContext:
capabilities:
add:
- DAC_READ_SEARCH
- NET_ADMIN
- SYS_ADMIN
- SYS_RESOURCE
privileged: true
```

**What I expected to happen:**

**What actually happened:**

**How to reproduce the problem:**

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.