google / google/gvisor

Rootless podman does not work with runsc

Open
#7,449 3 comments 0 reactions 0 assignees View on GitHub
type: enhancement
Dominant language
Go
Stars
19.3k
Forks
2k
Avg merge
3d 5h
Merged PRs (30d)
264

Description

### Description

I am trying to use [podman](https://github.com/containers/podman) to start runsc but failed. Here is the error I got with using either systemd or cgroupfs as the cgroup manager.
```
[hyu@fedora ~]$ podman --cgroup-manager systemd --runtime runsc run --systemd false -it docker.io/library/ubuntu:latest
Error: OCI runtime error: creating container: write unix @: sendmsg: broken pipe
[hyu@fedora ~]$ podman --cgroup-manager cgroupfs --runtime runsc run --systemd false -it docker.io/library/ubuntu:latest
Error: creating container: configuring cgroup: open /sys/fs/cgroup/cgroup.subtree_control: permission denied: OCI permission denied
```
Running podman with `sudo` is fine.

I saw the there is an existing issue https://github.com/google/gvisor/issues/311, which is not closed, but with slightly different error.

### Is this feature related to a specific bug?

No

### Do you have a specific solution in mind?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.