nestybox / nestybox/sysbox

azure k8s 1.37 with sysbox 0.7.0

Open
#999 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Shell
Stars
3.9k
Forks
230
Avg merge
7h 48m
Merged PRs (30d)
3

Description

Azur recently upgraded kubenetes to 1.33 , we ahve to upgrade sysbox to 0.7.0.

Initial issue observed after upgrade sysbox:
Containers failed to start with the following error:
Error: reading ID mappings from "/proc/0/uid_map": no such file or directory
According to

https://github.com/nestybox/sysbox/blob/master/docs/user-guide/security.md?utm_source=chatgpt.com#user-namespace-id-mapping

this error seems related to user ID mapping.

Sysbox relies on this mechanism to map container user IDs (e.g., root inside the container) to non-root users on the host for isolation.
This requires access to /proc/.../uid_map, which defines the UID mapping between container and host.

In addition, we are also seeing errors such as:
mounting "sysfs" ... operation not permitted which further indicates that certain low-level operations required by this runtime model (Docker-in-Docker via Sysbox) are restricted by new AKS.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the failure on Azure Kubernetes Service with the reported Kubernetes and Sysbox versions, then investigate the /proc/0/uid_map and sysfs permission errors. Done means Docker-in-Docker containers start successfully without these errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, docker
Domain
cloud, devops, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.