google / google/gvisor

Error: OCI runtime error: runsc: creating container: systemd error: Interactive authentication required.

Open
#11,543 16 comments 2 reactions 0 assignees View on GitHub
type: bug
Dominant language
Go
Stars
19.3k
Forks
2k
Avg merge
3d 5h
Merged PRs (30d)
264

Description

### Description

When I try to use runsc with rootless podman, I get an error:

```
$ podman run --interactive --tty --rm --runtime=runsc debian:testing
Error: OCI runtime error: runsc: creating container: systemd error: Interactive authentication required.
```

With runc, I don't get the error:

```
$ podman run --interactive --tty --rm --runtime=runc debian:testing
root@bbdf83f8f377:/#
```

I'm not sure if this is a bug in gvisor, podman, my setup, or something else. This seemed like a good place to start though since I couldn't find any reports of the same issue here or in podman.

### Steps to reproduce

Run the command above as a non-root user.

### runsc version

```shell
$ runsc -version
runsc version 0.0~20240729.0
spec: 1.2.0
```

### docker version (if using docker)

It's not docker, but seems relevant:

```shell
$ podman --version
podman version 5.4.0
```

### uname

Linux solaria 6.12.12-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.12-1 (2025-02-02) x86_64 GNU/Linux

### kubectl (if using Kubernetes)

```shell

```

### repo state (if built from source)

_No response_

### runsc debug logs (if available)

Here's the bottom of the create log. Let me know if more would be useful.

```shell
D0311 19:53:25.557605 2642085 container.go:200] Create container, cid: b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b, rootDir: "/run/user/1000/runsc"
D0311 19:53:25.557658 2642085 container.go:1797] Configuring container with a new userns with identity user mappings into current userns
D0311 19:53:25.557717 2642085 container.go:1853] UID Mappings:
D0311 19:53:25.557726 2642085 container.go:1855] Container ID: 0, Host ID: 0, Range Length: 1
D0311 19:53:25.557732 2642085 container.go:1855] Container ID: 1, Host ID: 1, Range Length: 65536
D0311 19:53:25.557769 2642085 container.go:1853] GID Mappings:
D0311 19:53:25.557777 2642085 container.go:1855] Container ID: 0, Host ID: 0, Range Length: 1
D0311 19:53:25.557781 2642085 container.go:1855] Container ID: 1, Host ID: 1, Range Length: 65536
D0311 19:53:25.557816 2642085 container.go:262] Creating new sandbox for container, cid: b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b
D0311 19:53:25.560717 2642085 cgroup.go:428] New cgroup for pid: self, *cgroup.cgroupSystemd: &{cgroupV2:{Mountpoint:/sys/fs/cgroup Path:/user.slice/libpod-b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b.scope Controllers:[cpuset cpu io memory hugetlb pids rdma misc] Own:[]} Name:b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b Parent:user.slice ScopePrefix:libpod properties:[] dbusConn:0xc000424280}
D0311 19:53:25.560739 2642085 systemd.go:98] Installing systemd cgroup resource controller under user.slice
D0311 19:53:25.560936 2642085 container.go:1036] Created filestore file at "/home/dseomn/.local/share/containers/storage/overlay/9cf5032d7db9dc90e050a258377367773f27dc3b742414a5dd3afbba14876693/merged/.gvisor.filestore.b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b" for mount source "/home/dseomn/.local/share/containers/storage/overlay/9cf5032d7db9dc90e050a258377367773f27dc3b742414a5dd3afbba14876693/merged"
D0311 19:53:25.560962 2642085 systemd.go:154] Joining systemd cgroup libpod-b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b.scope
D0311 19:53:25.568684 2642085 cgroup_v2.go:177] Deleting cgroup "/sys/fs/cgroup/user.slice/libpod-b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b.scope"
D0311 19:53:25.568720 2642085 container.go:790] Destroy container, cid: b157a14c7618504c34a0a4439d2379a8cc079c3953a5dabb8a9512fd81ca5e8b
W0311 19:53:25.568855 2642085 util.go:64] FATAL ERROR: creating container: systemd error: Interactive authentication required.
W0311 19:53:25.568892 2642085 main.go:231] Failure to execute command, err: 1
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.