Bug 2149409

Summary: HPP mounter deployment can't mount as unprivileged
Product: Container Native Virtualization (CNV) Reporter: Alex Kalenyuk <akalenyu>
Component: StorageAssignee: Alexander Wels <awels>
Status: VERIFIED --- QA Contact: Yan Du <yadu>
Severity: high Docs Contact:
Priority: unspecified    
Version: 4.12.0CC: jpeimer, jvilaca, yadu
Target Milestone: ---   
Target Release: 4.12.1   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: CNV v4.12.0-779 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Alex Kalenyuk 2022-11-29 20:03:52 UTC
Description of problem:
Mounter is running as USER 1000 and thus cannot perform the mount operation

Version-Release number of selected component (if applicable):
CNV 4.12.0

How reproducible:
100%

Steps to Reproduce:
1. Install HPP
2.
3.

Actual results:
Failed mounting "Output","out":"mount: only root can do that\n"

Expected results:
Mounter succeeds mounting

Additional info:
{"level":"error","ts":1669748871.4062114,"logger":"mounter","msg":"failed to mount device to path on host.","error":"exit status 1","stacktrace":"main.mountBlockVolume\n\t/home/prow/go/src/github.com/kubevirt/hostpath-provisioner-operator/cmd/mounter/main.go:256\nmain.main\n\t/home/prow/go/src/github.com/kubevirt/hostpath-provisioner-operator/cmd/mounter/main.go:161\nruntime.main\n\t/root/.gimme/versions/go1.18.2.linux.amd64/src/runtime/proc.go:250"}
{"level":"info","ts":1669748871.4063103,"logger":"mounter","msg":"Output","out":"mount: only root can do that\n"}

Comment 2 Yan Du 2023-02-13 10:18:00 UTC
Test on CNV-v4.12.1-40

not see the mount error in hostpath-provisioner-operator and hpp-pool pods.
and mounter runs as root
sh-4.4# id
uid=0(root) gid=0(root) groups=0(root)