Error: OCI runtime error: runsc: creating container: systemd error: Interactive authentication required.
- Dominant language
- Go
- Stars
- 19.3k
- Forks
- 2k
- Avg merge
- 3d 5h
- Merged PRs (30d)
- 264
Description
### Description
When I try to use runsc with rootless podman, I get an error:
```
$ podman run --interactive --tty --rm --runtime=runsc debian:testing
Error: OCI runtime error: runsc: creating container: systemd error: Interactive authentication required.
```
With runc, I don't get the error:
```
$ podman run --interactive --tty --rm --runtime=runc debian:testing
root@bbdf83f8f377:/#
```
I'm not sure if this is a bug in gvisor, podman, my setup, or something else. This seemed like a good place to start though since I couldn't find any reports of the same issue here or in podman.
### Steps to reproduce
Run the command above as a non-root user.
### runsc version
```shell
$ runsc -version
runsc version 0.0~20240729.0
spec: 1.2.0
```
### docker version (if using docker)
It's not docker, but seems relevant:
```shell
$ podman --version
podman version 5.4.0
```
### uname
Linux solaria 6.12.12-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.12-1 (2025-02-02) x86_64 GNU/Linux
### kubectl (if using Kubernetes)
```shell
```
### repo state (if built from source)
_No response_
### runsc debug logs (if available)
Here's the bottom of the create log. Let me know if more would be useful.
```shell
D0311 19:53:25.557605 2642085 container.go:200] Create container, cid: b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b, rootDir: "/run/user/1000/runsc"
D0311 19:53:25.557658 2642085 container.go:1797] Configuring container with a new userns with identity user mappings into current userns
D0311 19:53:25.557717 2642085 container.go:1853] UID Mappings:
D0311 19:53:25.557726 2642085 container.go:1855] Container ID: 0, Host ID: 0, Range Length: 1
D0311 19:53:25.557732 2642085 container.go:1855] Container ID: 1, Host ID: 1, Range Length: 65536
D0311 19:53:25.557769 2642085 container.go:1853] GID Mappings:
D0311 19:53:25.557777 2642085 container.go:1855] Container ID: 0, Host ID: 0, Range Length: 1
D0311 19:53:25.557781 2642085 container.go:1855] Container ID: 1, Host ID: 1, Range Length: 65536
D0311 19:53:25.557816 2642085 container.go:262] Creating new sandbox for container, cid: b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b
D0311 19:53:25.560717 2642085 cgroup.go:428] New cgroup for pid: self, *cgroup.cgroupSystemd: &{cgroupV2:{Mountpoint:/sys/fs/cgroup Path:/user.slice/libpod-b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b.scope Controllers:[cpuset cpu io memory hugetlb pids rdma misc] Own:[]} Name:b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b Parent:user.slice ScopePrefix:libpod properties:[] dbusConn:0xc000424280}
D0311 19:53:25.560739 2642085 systemd.go:98] Installing systemd cgroup resource controller under user.slice
D0311 19:53:25.560936 2642085 container.go:1036] Created filestore file at "/home/dseomn/.local/share/containers/storage/overlay/9cf5032d7db9dc90e050a258377367773f27dc3b742414a5dd3afbba14876693/merged/.gvisor.filestore.b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b" for mount source "/home/dseomn/.local/share/containers/storage/overlay/9cf5032d7db9dc90e050a258377367773f27dc3b742414a5dd3afbba14876693/merged"
D0311 19:53:25.560962 2642085 systemd.go:154] Joining systemd cgroup libpod-b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b.scope
D0311 19:53:25.568684 2642085 cgroup_v2.go:177] Deleting cgroup "/sys/fs/cgroup/user.slice/libpod-b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b.scope"
D0311 19:53:25.568720 2642085 container.go:790] Destroy container, cid: b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b
W0311 19:53:25.568855 2642085 util.go:64] FATAL ERROR: creating container: systemd error: Interactive authentication required.
W0311 19:53:25.568892 2642085 main.go:231] Failure to execute command, err: 1
```
Contributor guide
Assessment
This issue has not been assessed yet.