Bugzilla (bugzilla.redhat.com) will be under maintenance for infrastructure upgrades and will not be unavailable on July 31st between 12:30 AM - 05:30 AM UTC. We appreciate your understanding and patience. You can follow status.redhat.com for details.
Bug 1410841 - user namespace is not working
Summary: user namespace is not working
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: runc
Version: 7.3
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Lokesh Mandvekar
QA Contact: atomic-bugs@redhat.com
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-01-06 15:41 UTC by Qian Cai
Modified: 2017-01-20 19:41 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-01-20 19:41:30 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Qian Cai 2017-01-06 15:41:25 UTC
Description of problem:
Setup user namespace is not working in runc.

# cat config.json
   "linux": {
        "uidMappings": [
                {
                        "hostID": 1000,
                        "containerID": 0,
                        "size": 32000
                }
        ],
        "gidMappings": [
                {
                        "hostID": 1000,
                        "containerID": 0,
                        "size": 32000
                }
        ],
...
    "process": {
        "args": [
            "touch",
            "root/foobar"
        ],
...
        "user": {}

# cat /proc/cmdline
... user_namespace.enable=1

# runc start root
could not synchronise with container process: operation not permitted

We might need to update to the latest upstream version which is working fine.

# /usr/local/sbin/runc -v
runc version 1.0.0-rc2
commit: 1a9dd2678d2d6ad574f05cb7b9ae46ce65586725
spec: 1.0.0-rc3

# /usr/local/sbin/runc create root
# /usr/local/sbin/runc start root
touch: cannot touch 'root/foobar': Permission denied

Version-Release number of selected component (if applicable):
runc-0.1.1-5.el7.x86_64

How reproducible:
always

Comment 1 Lokesh Mandvekar 2017-01-06 15:44:51 UTC
Can we delay this to 7.3.3?


Mrunal, do you know when runc 1.0.0 will be released?

Comment 3 Qian Cai 2017-01-20 19:41:30 UTC
This is working now as the rebase.


Note You need to log in before you can comment on or make changes to this bug.