containers / containers/podman-compose

Error: runc: runc create failed: unable to start container process: error during container init: error mounting : OCI permission denied

Open
#1,037 0 comments 2 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
6.2k
Forks
622
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
I am trying to run the containers as rootless user. I was able to start database(Postgesql) as non root user. And when trying to start artifactory container it is giving below error. I am using podman-compose for running them. If I run the command as root user, everything works fine without any issue.

**Error**
Error: runc: runc create failed: unable to start container process: error during container init: error mounting "/af/certs" to rootfs at "/var/opt/jfrog/artifactory/etc/security/keys/trusted": lstat /af/shared/storage/overlay/5etzgttgsdfe10/merged/var/opt/jfrog/artifactory/etc/security/keys: permission denied: OCI permission denied

**Steps to reproduce the behavior:**

run the below command as non root user.
podman run --name=artifactory -d --requires=postgresql --label io.podman.compose.project=artifactory --label io.podman.compose.version=1.0.6 --label PODMAN_SYSTEMD_UNIT=podman-compose@artifactory.service --label com.docker.compose.project=artifactory --label com.docker.compose.project.working_dir=/**/artifactory --label com.docker.compose.project.config_files=docker-compose.yaml --label com.docker.compose.container-number=1 --label com.docker.compose.service=artifactory -e JF_ROUTER_ENTRYPOINTS_EXTERNALPORT=8082 -e EXTRA_JAVA_OPTIONS="-********************" -v ********** -v /etc/localtime:/etc/localtime:ro -v /***/certs:/var/opt/jfrog/artifactory/etc/security/keys/trusted:ro -v /****/certs/cacerts:/var/opt/jfrog/artifactory/etc/cacerts --net artifactory_default --network-alias artifactory --log-driver=json-file --log-opt=max-size=50m --log-opt=max-file=10 --expose 8082 --expose 8081 --restart always --ulimit nproc=62750 --ulimit nofile=32000:40000 docker.bintray.io/jfrog/artifactory-pro:7.90.8

****Environment:****
- OS: Linux

$ podman-compose version
podman-compose version: 1.0.6
['podman', '--version', '']
using podman version: 4.6.1
podman-compose version 1.0.6
podman --version
podman version 4.6.1
exit code: 0

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.