twosigma / twosigma/debootwrap

E: Cannot install into target '/target' mounted with noexec or nodev

Open
#1 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
6
Forks
1
PR merge metrics
No merged PRs in 30d

Description

When I run `./debootwrap ~/stretch-env` as a non-root user, the following happens:

```
$ ./debootwrap ~/stretch-env
+ REPO=http://deb.debian.org/debian
+ DIST=stretch
+ mkdir -p /home/hack/stretch-env
+ bubblewrap --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --ro-bind /bin/true /bin/mknod --proc /proc --dev /dev --bind /home/hack/stretch-env /target --file 4 /etc/resolv.conf --file 5 /etc/ld.so.cache /usr/sbin/debootstrap --foreign stretch /target http://deb.debian.org/debian
+ env -i LANG=C.UTF-8 USER=root TERM=xterm-256color LOGNAME=root PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin bwrap --unshare-all --share-net --uid 0 --gid 0 --seccomp 3 --ro-bind /usr /usr --ro-bind /lib /lib --ro-bind /lib64 /lib64 --ro-bind /bin /bin --ro-bind /sbin /sbin --ro-bind /bin/true /bin/mknod --proc /proc --dev /dev --bind /home/hack/stretch-env /target --file 4 /etc/resolv.conf --file 5 /etc/ld.so.cache /usr/sbin/debootstrap --foreign stretch /target http://deb.debian.org/debian
W: Unable to read /etc/apt/apt.conf.d/ - DirectoryExists (2: No such file or directory)
W: Unable to read /etc/apt/apt.conf.d/ - DirectoryExists (2: No such file or directory)
mknod: /target/test-dev-null: Operation not permitted
E: Cannot install into target '/target' mounted with noexec or nodev
```

Host is a VPS running Ubuntu 22.04.3.

All relevant files and directories live on a Btrfs filesystem that is mounted on `/`. As is typical for root filesystems, neither `noexec` nor `nodev` are set.

Maybe Bubblewrap now sets `nodev` (or `noexec`?) when Bubblewrap performs bind mounts?

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.