Skip to content

Installing Rootless docker CLI no longer works in 0.16.0 :fork/exec /proc/10331/exe: permission denied: unknown. (When nerdctl and Docker are co-installed) #1641

Open
@jwall-ys

Description

@jwall-ys

Description

Using limactl 0.16.0 - when running the steps to create rootless docker, rootless docker functions as if it's not installed. e.g.:

$ limactl start
? Creating an instance "default" Proceed with the current configuration
INFO[0003] Attempting to download the image              arch=aarch64 digest="sha256:76a0fc791ed48ea8d0325463e2748e06aa3836292df1178ee4af8daf12a643bf" location="https://cloud-images.ubuntu.com/releases/23.04/release-20230502/ubuntu-23.04-server-cloudimg-arm64.img"
Downloading the image (ubuntu-23.04-server-cloudimg-arm64.img)
742.50 MiB / 742.50 MiB [----------------------------------] 100.00% 16.93 MiB/s
INFO[0047] Downloaded the image from "https://cloud-images.ubuntu.com/releases/23.04/release-20230502/ubuntu-23.04-server-cloudimg-arm64.img" 
INFO[0048] Attempting to download the nerdctl archive    arch=aarch64 digest="sha256:589dabd962d936b29fd377dcddbb49c07d1c4c27dd4b402bc4b6b20287fe9c37" location="https://github.com/containerd/nerdctl/releases/download/v1.4.0/nerdctl-full-1.4.0-linux-arm64.tar.gz"
INFO[0048] Using cache "/Users/jasonwall/Library/Caches/lima/download/by-url-sha256/8704652b907393aea54c8d98b48efa0fe9bef4d120fbbf8799bb5264631da634/data" 
INFO[0049] [hostagent] Starting QEMU (hint: to watch the boot progress, see "/Users/jasonwall/.lima/default/serial.log") 
INFO[0049] SSH Local Port: 60022                        
INFO[0049] [hostagent] Waiting for the essential requirement 1 of 5: "ssh" 
INFO[0067] [hostagent] Waiting for the essential requirement 1 of 5: "ssh" 
INFO[0067] [hostagent] The essential requirement 1 of 5 is satisfied 
INFO[0067] [hostagent] Waiting for the essential requirement 2 of 5: "user session is ready for ssh" 
INFO[0067] [hostagent] The essential requirement 2 of 5 is satisfied 
INFO[0067] [hostagent] Waiting for the essential requirement 3 of 5: "sshfs binary to be installed" 
INFO[0079] [hostagent] The essential requirement 3 of 5 is satisfied 
INFO[0079] [hostagent] Waiting for the essential requirement 4 of 5: "/etc/fuse.conf (/etc/fuse3.conf) to contain \"user_allow_other\"" 
INFO[0082] [hostagent] The essential requirement 4 of 5 is satisfied 
INFO[0083] [hostagent] Waiting for the essential requirement 5 of 5: "the guest agent to be running" 
INFO[0083] [hostagent] The essential requirement 5 of 5 is satisfied 
INFO[0083] [hostagent] Mounting "/Users/jasonwall" on "/Users/jasonwall" 
INFO[0083] [hostagent] Mounting "/tmp/lima" on "/tmp/lima" 
INFO[0083] [hostagent] Waiting for the optional requirement 1 of 2: "systemd must be available" 
INFO[0083] [hostagent] Forwarding "/run/lima-guestagent.sock" (guest) to "/Users/jasonwall/.lima/default/ga.sock" (host) 
INFO[0083] [hostagent] The optional requirement 1 of 2 is satisfied 
INFO[0083] [hostagent] Waiting for the optional requirement 2 of 2: "containerd binaries to be installed" 
INFO[0083] [hostagent] Not forwarding TCP 127.0.0.53:53 
INFO[0083] [hostagent] Not forwarding TCP 127.0.0.54:53 
INFO[0083] [hostagent] Not forwarding TCP [::]:22       
INFO[0089] [hostagent] The optional requirement 2 of 2 is satisfied 
INFO[0089] [hostagent] Waiting for the final requirement 1 of 1: "boot scripts must have finished" 
INFO[0099] [hostagent] The final requirement 1 of 1 is satisfied 
INFO[0099] READY. Run `lima` to open the shell.    

$ lima

$ curl -fsSL https://get.docker.com | bash

$ dockerd-rootless-setuptool.sh install

$ docker run --rm nginx

Unable to find image 'nginx:latest' locally
Status: Downloaded newer image for nginx:latest

docker: Error response from daemon: failed to create task for container: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error running hook #0: fork/exec /proc/10331/exe: permission denied: unknown.

Expected behaviour with this setup would be that nginx is able to start without using sudo. This works with lima 0.15.1 or earlier, as well as equivalent versions of Ubuntu in other VM providers.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions