Error mounting cifs using sysbox.
Open
@rodnymolina is already working on this.
Since Mar 23, 2022.
enhancement
- Dominant language
- Shell
- Stars
- 3.9k
- Forks
- 230
- Avg merge
- 7h 48m
- Merged PRs (30d)
- 3
Description
Mounting cifs shares from inside sysbox gives an error
root@.../home/ubuntu# docker run -it ubuntu:latest
root@c77dcf7a187c:/# apt-get update
root@c77dcf7a187c:/# apt-get install cifs-utils nfs-common
root@c77dcf7a187c:/# mount 192.168.252.42:/data /mnt
root@c77dcf7a187c:/# df -H /mnt
Filesystem Size Used Avail Use% Mounted on
192.168.252.42:/data 1.1T 80M 1.1T 1% /mnt
root@c77dcf7a187c:/# umount /mnt
oot@c77dcf7a187c:/# cat > /tmp/cred
username=image_creator
password=-----------
root@c77dcf7a187c:/# mount -t cifs //172.30.139.13/isg_warehouse /mnt -o credentials=/tmp/cred,rw,relatime,vers=1.0,cache=strict,domain=SANGER,uid=0,noforceuid,gid=0,noforcegid,file_mode=0755,dir_mode=0755,nounix,serverino,mapposix,rsize=61440,wsize=65536,echo_interval=60,actimeo=1
mount error(1): Operation not permitted
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) and kernel log messages (dmesg)
root@c77dcf7a187c:/# cat /proc/self/uid_map
0 165536 65536
root@c77dcf7a187c:/# mount -t cifs //172.30.139.13/isg_warehouse /mnt -o credentials=/tmp/cred,rw,relatime,vers=1.0,cache=strict,domain=SANGER,uid=165536,noforceuid,gid=165536,noforcegid,file_mode=0755,dir_mode=0755,nounix,serverino,mapposix,rsize=61440,wsize=65536,echo_interval=60,actimeo=1
root@c77dcf7a187c:/# findmnt
TARGET SOURCE FSTYPE OPTIONS
/ . shiftfs rw,relatime
|-/sys sysfs sysfs rw,nosuid,nodev,noexec,relatime
| |-/sys/firmware tmpfs tmpfs ro,relatime,uid=165536,gid=165536
| |-/sys/fs/cgroup tmpfs tmpfs rw,nosuid,nodev,noexec,relatime,mode=755,uid=165536,gid=165536
| | |-/sys/fs/cgroup/systemd systemd cgroup rw,nosuid,nodev,noexec,relatime,xattr,name=systemd
| | |-/sys/fs/cgroup/perf_event cgroup cgroup rw,nosuid,nodev,noexec,relatime,perf_event
| | |-/sys/fs/cgroup/cpu,cpuacct cgroup cgroup rw,nosuid,nodev,noexec,relatime,cpu,cpuacct
| | |-/sys/fs/cgroup/net_cls,net_prio cgroup cgroup rw,nosuid,nodev,noexec,relatime,net_cls,net_prio
| | |-/sys/fs/cgroup/memory cgroup cgroup rw,nosuid,nodev,noexec,relatime,memory
| | |-/sys/fs/cgroup/rdma cgroup cgroup rw,nosuid,nodev,noexec,relatime,rdma
| | |-/sys/fs/cgroup/devices cgroup cgroup rw,nosuid,nodev,noexec,relatime,devices
| | |-/sys/fs/cgroup/cpuset cgroup cgroup rw,nosuid,nodev,noexec,relatime,cpuset
| | |-/sys/fs/cgroup/blkio cgroup cgroup rw,nosuid,nodev,noexec,relatime,blkio
| | |-/sys/fs/cgroup/hugetlb cgroup cgroup rw,nosuid,nodev,noexec,relatime,hugetlb
| | |-/sys/fs/cgroup/pids cgroup cgroup rw,nosuid,nodev,noexec,relatime,pids
| | `-/sys/fs/cgroup/freezer cgroup cgroup rw,nosuid,nodev,noexec,relatime,freezer
| |-/sys/kernel/config tmpfs tmpfs rw,nosuid,nodev,noexec,relatime,size=1024k,uid=165536,gid=165536
| |-/sys/kernel/debug tmpfs tmpfs rw,nosuid,nodev,noexec,relatime,size=1024k,uid=165536,gid=165536
| |-/sys/kernel/tracing tmpfs tmpfs rw,nosuid,nodev,noexec,relatime,size=1024k,uid=165536,gid=165536
| `-/sys/module/nf_conntrack/parameters/hashsize sysboxfs[/sys/module/nf_conntrack/parameters/hashsize] fuse rw,nosuid,nodev,relatime,user_id=0,group_id=0,default_permissions,allow_other
|-/proc proc proc rw,nosuid,nodev,noexec,relatime
| |-/proc/bus proc[/bus] proc ro,relatime
| |-/proc/fs proc[/fs] proc ro,relatime
| |-/proc/irq proc[/irq] proc ro,relatime
| |-/proc/sysrq-trigger proc[/sysrq-trigger] proc ro,relatime
| |-/proc/acpi tmpfs tmpfs ro,relatime,uid=165536,gid=165536
| |-/proc/keys udev[/null] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/proc/timer_list udev[/null] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/proc/sched_debug udev[/null] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/proc/scsi tmpfs tmpfs ro,relatime,uid=165536,gid=165536
| |-/proc/swaps sysboxfs[/proc/swaps] fuse rw,nosuid,nodev,relatime,user_id=0,group_id=0,default_permissions,allow_other
| |-/proc/sys sysboxfs[/proc/sys] fuse rw,nosuid,nodev,relatime,user_id=0,group_id=0,default_permissions,allow_other
| `-/proc/uptime sysboxfs[/proc/uptime] fuse rw,nosuid,nodev,relatime,user_id=0,group_id=0,default_permissions,allow_other
|-/dev tmpfs tmpfs rw,nosuid,size=65536k,mode=755,uid=165536,gid=165536
| |-/dev/console devpts[/0] devpts rw,nosuid,noexec,relatime,gid=165541,mode=620,ptmxmode=666
| |-/dev/mqueue mqueue mqueue rw,nosuid,nodev,noexec,relatime
| |-/dev/pts devpts devpts rw,nosuid,noexec,relatime,gid=165541,mode=620,ptmxmode=666
| |-/dev/shm shm tmpfs rw,nosuid,nodev,noexec,relatime,size=65536k,uid=165536,gid=165536
| |-/dev/null udev[/null] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/dev/kmsg udev[/null] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/dev/random udev[/random] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/dev/full udev[/full] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/dev/tty udev[/tty] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| |-/dev/zero udev[/zero] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
| `-/dev/urandom udev[/urandom] devtmpfs rw,nosuid,noexec,relatime,size=11845476k,nr_inodes=2961369,mode=755
|-/etc/resolv.conf /var/lib/docker/containers/c77dcf7a187cd9ec8810a4eeb703b1d24b7a6d549ceea04ac2846c26e6ab614f[/resolv.conf]
| shiftfs rw,relatime
|-/etc/hostname /var/lib/docker/containers/c77dcf7a187cd9ec8810a4eeb703b1d24b7a6d549ceea04ac2846c26e6ab614f[/hostname]
| shiftfs rw,relatime
|-/etc/hosts /var/lib/docker/containers/c77dcf7a187cd9ec8810a4eeb703b1d24b7a6d549ceea04ac2846c26e6ab614f[/hosts]
| shiftfs rw,relatime
|-/var/lib/docker /dev/vda1[/var/lib/sysbox/docker/c77dcf7a187cd9ec8810a4eeb703b1d24b7a6d549ceea04ac2846c26e6ab614f]
| ext4 rw,relatime
|-/var/lib/kubelet /dev/vda1[/var/lib/sysbox/kubelet/c77dcf7a187cd9ec8810a4eeb703b1d24b7a6d549ceea04ac2846c26e6ab614f]
| ext4 rw,relatime
|-/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs /dev/vda1[/var/lib/sysbox/containerd/c77dcf7a187cd9ec8810a4eeb703b1d24b7a6d549ceea04ac2846c26e6ab614f]
| ext4 rw,relatime
|-/usr/src/linux-headers-5.4.0-42 /usr/src/linux-headers-5.4.0-42 shiftfs ro,relatime
|-/usr/src/linux-headers-5.4.0-42-generic /usr/src/linux-headers-5.4.0-42-generic shiftfs ro,relatime
`-/usr/lib/modules/5.4.0-42-generic /lib/modules/5.4.0-42-generic shiftfs ro,relatime
This is with a sysbox compiled this morning
[0;32m openstack: Cloning into 'sysbox'...[0m
[0;32m openstack: remote: Enumerating objects: 273, done.[K[0m
[0;32m openstack: remote: Counting objects: 100% (273/273), done.[K[0m
[0;32m openstack: remote: Compressing objects: 100% (139/139), done.[K[0m
[0;32m openstack: remote: Total 7948 (delta 175), reused 161 (delta 129), pack-reused 7675[K[0m
[0;32m openstack: Receiving objects: 100% (7948/7948), 59.95 MiB | 22.90 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (4125/4125), done.[0m
[0;32m openstack: Submodule 'sysbox-dockerfiles' (git@github.com:nestybox/dockerfiles.git) registered for path 'sysbox-dockerfiles'[0m
[0;32m openstack: Submodule 'sysbox-fs' (git@github.com:nestybox/sysbox-fs.git) registered for path 'sysbox-fs'[0m
[0;32m openstack: Submodule 'sysbox-ipc' (git@github.com:nestybox/sysbox-ipc.git) registered for path 'sysbox-ipc'[0m
[0;32m openstack: Submodule 'sysbox-libs' (git@github.com:nestybox/sysbox-libs.git) registered for path 'sysbox-libs'[0m
[0;32m openstack: Submodule 'sysbox-mgr' (git@github.com:nestybox/sysbox-mgr.git) registered for path 'sysbox-mgr'[0m
[0;32m openstack: Submodule 'sysbox-runc' (git@github.com:nestybox/sysbox-runc.git) registered for path 'sysbox-runc'[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-dockerfiles'...[0m
[0;32m openstack: remote: Enumerating objects: 293, done.[0m
[0;32m openstack: remote: Counting objects: 100% (293/293), done.[0m
[0;32m openstack: remote: Compressing objects: 100% (146/146), done.[0m
[0;32m openstack: remote: Total 293 (delta 105), reused 270 (delta 92), pack-reused 0[0m
[0;32m openstack: Receiving objects: 100% (293/293), 19.93 MiB | 19.24 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (105/105), done.[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-fs'...[0m
[0;32m openstack: remote: Enumerating objects: 325, done.[0m
[0;32m openstack: remote: Counting objects: 100% (325/325), done.[0m
[0;32m openstack: remote: Compressing objects: 100% (146/146), done.[0m
[0;32m openstack: remote: Total 5784 (delta 197), reused 232 (delta 172), pack-reused 5459[0m
[0;32m openstack: Receiving objects: 100% (5784/5784), 4.77 MiB | 17.02 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (3066/3066), done.[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-ipc'...[0m
[0;32m openstack: remote: Enumerating objects: 3765, done.[0m
[0;32m openstack: remote: Counting objects: 100% (3765/3765), done.[0m
[0;32m openstack: remote: Compressing objects: 100% (2255/2255), done.[0m
[0;32m openstack: remote: Total 3765 (delta 1280), reused 3741 (delta 1266), pack-reused 0[0m
[0;32m openstack: Receiving objects: 100% (3765/3765), 7.88 MiB | 2.67 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (1280/1280), done.[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-libs'...[0m
[0;32m openstack: remote: Enumerating objects: 184, done.[0m
[0;32m openstack: remote: Counting objects: 100% (184/184), done.[0m
[0;32m openstack: remote: Compressing objects: 100% (129/129), done.[0m
[0;32m openstack: remote: Total 184 (delta 84), reused 135 (delta 53), pack-reused 0[0m
[0;32m openstack: Receiving objects: 100% (184/184), 66.56 KiB | 3.70 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (84/84), done.[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-mgr'...[0m
[0;32m openstack: remote: Enumerating objects: 35, done.[0m
[0;32m openstack: remote: Counting objects: 100% (35/35), done.[0m
[0;32m openstack: remote: Compressing objects: 100% (15/15), done.[0m
[0;32m openstack: remote: Total 1032 (delta 21), reused 22 (delta 20), pack-reused 997[0m
[0;32m openstack: Receiving objects: 100% (1032/1032), 1.39 MiB | 1.53 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (489/489), done.[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-runc'...[0m
[0;32m openstack: remote: Enumerating objects: 32969, done.[0m
[0;32m openstack: remote: Total 32969 (delta 0), reused 0 (delta 0), pack-reused 32969[0m
[0;32m openstack: Receiving objects: 100% (32969/32969), 9.45 MiB | 6.83 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (20321/20321), done.[0m
[0;32m openstack: Submodule path 'sysbox-dockerfiles': checked out '4bb4b114a7776cd687e2f873ae92c933f908988e'[0m
[0;32m openstack: Submodule path 'sysbox-fs': checked out '4610f0be058e9121e91db9e9642079c4f12ae926'[0m
[0;32m openstack: Submodule 'bazil' (git@github.com:nestybox/fuse) registered for path 'sysbox-fs/bazil'[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-fs/bazil'...[0m
[0;32m openstack: remote: Enumerating objects: 2204, done.[0m
[0;32m openstack: remote: Total 2204 (delta 0), reused 0 (delta 0), pack-reused 2204[0m
[0;32m openstack: Receiving objects: 100% (2204/2204), 874.65 KiB | 5.91 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (1368/1368), done.[0m
[0;32m openstack: Submodule path 'sysbox-fs/bazil': checked out '76fedf6163b9a7411d029805a23729ffc07f7df1'[0m
[0;32m openstack: Submodule path 'sysbox-ipc': checked out '6eec20f56a865b823c9ab61c3dd75227c1ca0783'[0m
[0;32m openstack: Submodule path 'sysbox-libs': checked out '8eeb72b735540aaa166f99ddd57c8e42fc782048'[0m
[0;32m openstack: Submodule 'libseccomp' (git@github.com:nestybox/libseccomp.git) registered for path 'sysbox-libs/libseccomp'[0m
[0;32m openstack: Submodule 'libseccomp-golang' (git@github.com:nestybox/libseccomp-golang.git) registered for path 'sysbox-libs/libseccomp-golang'[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-libs/libseccomp'...[0m
[0;32m openstack: remote: Enumerating objects: 5878, done.[0m
[0;32m openstack: remote: Counting objects: 100% (5878/5878), done.[0m
[0;32m openstack: remote: Compressing objects: 100% (1262/1262), done.[0m
[0;32m openstack: remote: Total 5878 (delta 4552), reused 5860 (delta 4540), pack-reused 0[0m
[0;32m openstack: Receiving objects: 100% (5878/5878), 1.01 MiB | 4.29 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (4552/4552), done.[0m
[0;32m openstack: Cloning into '/tmp/sysbox/sysbox-libs/libseccomp-golang'...[0m
[0;32m openstack: remote: Enumerating objects: 159, done.[0m
[0;32m openstack: remote: Counting objects: 100% (159/159), done.[0m
[0;32m openstack: remote: Compressing objects: 100% (77/77), done.[0m
[0;32m openstack: remote: Total 159 (delta 95), reused 133 (delta 79), pack-reused 0[0m
[0;32m openstack: Receiving objects: 100% (159/159), 50.76 KiB | 12.69 MiB/s, done.[0m
[0;32m openstack: Resolving deltas: 100% (95/95), done.[0m
[0;32m openstack: Submodule path 'sysbox-libs/libseccomp': checked out 'bb94b24efc970fc91a239785900c89b3d28ea4b5'[0m
[0;32m openstack: Submodule path 'sysbox-libs/libseccomp-golang': checked out 'bcff2d4628f0faab6798c1499f8a45da7aeb2150'[0m
[0;32m openstack: Submodule path 'sysbox-mgr': checked out '95010ecb3e813d75ec8b523bd8f6d8890dfa26e6'[0m
[0;32m openstack: Submodule path 'sysbox-runc': checked out '4a0e3e60a8b287e157eb22bc365bf62da4ed11a2'[0m
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.