RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1719452 - rootless fail: container create failed: cannot specify gid= mount options for unmapped gid in rootless containers
Summary: rootless fail: container create failed: cannot specify gid= mount options for...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: runc
Version: 7.7
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Jindrich Novy
QA Contact: atomic-bugs@redhat.com
URL:
Whiteboard:
: 1734375 (view as bug list)
Depends On:
Blocks: 1186913 1688348 1693961 1718378
TreeView+ depends on / blocked
 
Reported: 2019-06-11 20:35 UTC by James Cassell
Modified: 2023-12-15 16:33 UTC (History)
14 users (show)

Fixed In Version: runc-1.0.0-64.rc8.el7
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-08-06 17:32:59 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1693424 0 unspecified CLOSED rootless: cannot specify gid= mount options for unmapped gid in rootless containers 2021-02-22 00:41:40 UTC
Red Hat Product Errata RHBA-2019:2389 0 None None None 2019-08-06 17:33:06 UTC

Description James Cassell 2019-06-11 20:35:56 UTC 
Description of problem:

rootless fails with 

may be related: https://bugzilla.redhat.com/show_bug.cgi?id=1693424


Version-Release number of selected component (if applicable):
1.3.2-1.git14fdcd0.el7

How reproducible:
100%

Steps to Reproduce:
1. install podman on RHEL 7.7 Beta
2. podman pull ubi8
3. podman run -it --net=host ubi8

Actual results:
Error: container create failed: cannot specify gid= mount options for unmapped gid in rootless containers
: internal libpod error


Expected results:
bash-4.4#


Additional info:
downgrading to 0.12 makes it work again.
Comment 2 Daniel Walsh 2019-06-12 07:37:59 UTC 
Does this mean the podman and runc are not in sync?  We need to make sure we have an updated version of runc to match the podman version.
Comment 11 Derrick Ornelas 2019-07-30 13:34:46 UTC 
*** Bug 1734375 has been marked as a duplicate of this bug. ***
Comment 12 Alex Jia 2019-07-31 04:36:13 UTC 
Fixed in runc-1.0.0-64.rc8.el7.x86_64

# podman pull ubi8
Trying to pull registry.access.redhat.com/ubi8...Getting image source signatures
Copying blob c585fd5093c6 done
Copying blob e61d8721e62e done
Copying config c7a62535df done
Writing manifest to image destination
Storing signatures
c7a62535df3cebd7cb714574c04fb3aa71b92551c11a164cef461855360d3970

# podman images
REPOSITORY                        TAG      IMAGE ID       CREATED      SIZE
registry.access.redhat.com/ubi8   latest   c7a62535df3c   7 days ago   216 MB

# podman run -it --net=host ubi8
bash-4.4# pwd
/
Comment 14 James Cassell 2019-08-02 22:18:29 UTC 
I've confirmed this fix on RHEL 7.7 beta with the latest packages in the rhel-7-server-extras-rpms repo.  All that's missing now for seamless rootless containers is slirp4netns to avoid having to use the `--net=host` and provide network isolation of the rootless containers.
Comment 16 errata-xmlrpc 2019-08-06 17:32:59 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2389
Note You need to log in before you can comment on or make changes to this bug.