bottlerocket-os / bottlerocket-os/bottlerocket
Dockerd-rootless does not start
- Dominant language
- Rust
- Stars
- 9.7k
- Forks
- 586
- Avg merge
- 1d 11h
- Merged PRs (30d)
- 11
Description
**Image I'm using:** ami-003e59b5f03f35661
Running a helm chart using docker:20.10-dind-rootless. I already checked out the solutions mentioned here: https://github.com/bottlerocket-os/bottlerocket/issues/1569 but I get this error when I try to run Dockerd inside bottlerocket:
```
exec rootlesskit \
--mtu="${DOCKERD_ROOTLESS_ROOTLESSKIT_MTU:-1500}" \
--disable-host-loopback \
--copy-up=/etc \
--copy-up=/run \
--port-driver=builtin \
--net="${DOCKERD_ROOTLESS_ROOTLESSKIT_NET:-vpnkit}" \
${DOCKERD_ROOTLESS_ROOTLESSKIT_FLAGS:-} \
"$@"
time="2023-03-13T13:23:00Z" level=warning msg="failed to mount sysfs, falling back to read-only mount: operation not permitted"
[rootlesskit:child ] error: creating tap tap0: ioctl: permission denied
```
I tried to adjust the capabilities ofc:
```
securityContext:
capabilities:
add:
- DAC_READ_SEARCH
- NET_ADMIN
- SYS_ADMIN
- SYS_RESOURCE
privileged: true
```
**What I expected to happen:**
**What actually happened:**
**How to reproduce the problem:**
Contributor guide
Assessment
This issue has not been assessed yet.