containers / containers/bubblewrap

bwrap refuses to run with ambient capabilities

Open
#380 24 comments 2 reactions 0 assignees View on GitHub
Dominant language
C
Stars
8.7k
Forks
386
Avg merge
3d 17h
Merged PRs (30d)
11

Description

When running in podman rootless container launched with `--userns=keep-id` alone, `bwrap` refuses to run with following message:
```
bwrap: Unexpected capabilities but not setuid, old file caps config?
```
However, adding `--user 1000:1000` (or any other uid:gid) makes bwrap work as expected.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.