Docker's `--ipc=shareable` does not work with Sysbox
Open
@ctalledo is already working on this.
Since Feb 19, 2022.
bug
- Dominant language
- Shell
- Stars
- 3.9k
- Forks
- 230
- Avg merge
- 7h 48m
- Merged PRs (30d)
- 3
Description
If I try to share the same IPC namespace of two containers, the first one started with --ipc=shareable and the second one with --ipc=container:CONTAINERID, I get this error at the start of the second container:
docker: Error response from daemon: failed to create shim task: OCI runtime create failed: container_linux.go:419: starting container process caused: process_linux.go:607: container init caused: rootfs_linux.go:67: setting up rootfs mounts caused: rootfs_linux.go:1122: mounting "mqueue" to rootfs "/var/lib/sysbox/rootfs/cdf52a9bd7a7ce08f5ed3cbf226ed2133a5533535a4053d3c36253ba36df700a/top/merged" at "dev/mqueue" caused: operation not permitted: unknown.
Another IPC issue: If I start with --ipc=host I get:
docker: Error response from daemon: failed to create shim task: OCI runtime create failed: error in the container spec: invalid namespace config: container spec missing namespaces Set{ipc}: unknown.
The second error message sound like there is no IPC option specified.
This happened with the sysbox test version for id mapped mounts 0.5.0-dev, but I assume the IPC issue is unrelated to the mounts.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.