Podman: rawhide: rootless: podman run broken: slirp4netns failed

[edsantiago]

On latest & greatest rawhide:

$ podman run --rm  alpine date
Error: slirp4netns failed

Debug log attached, but there is no useful trace of the actual slirp4netns invocation. There are cgroup warnings at the end.

Side note: I also saw, on the very first rootless run:

WARN[0000] Error initializing configured OCI runtime crun: no valid executable found for OCI runtime crun: invalid argument

No idea if this is related.

podman-1.5.1-0.3.dev.git3bc861c.fc31
slirp4netns-0.4.0-20.1.dev.gitbbd6f25.fc31
kernel-5.3.0-0.rc3.git1.1.fc31
runc-1.0.0-98.dev.git2e94378.fc31

podman-slirp4netns-failed.log

[mheon]

The warn line is fine - we're shipping a config that includes crun but it's not a hard dependency of the package, so if it's not available, we throw a warning in the logs and don't allow using it.

[mheon]

@giuseppe PTAL

[edsantiago]

Still failing with latest 1.5.1-0.8.dev.gitec93c9d.fc31 build (click /tmp/package-test.sh 12m11s and scroll to line 470) (yes, I know the line is green and should be red. That seems to have started happening last week. I'm hoping it'll get fixed). ec93c9d8 is from just a little while ago today.

[rhatdan]

@giuseppe PTAL

[giuseppe]

slirp4netns cannot open /dev/net/tun. The file has the wrong permissions:

$ ls -l /dev/net/tun
crw-------. 1 root root 10, 200 Aug 13 11:56 /dev/net/tun

If I change it to 666 then it works fine.

It looks like a regression in udev. Could you file a bug?

[rhatdan]

Yes this looks like a bug.

[rhatdan]

https://bugzilla.redhat.com/show_bug.cgi?id=1740664

[edsantiago]

~I'm~ I was trying to narrow down the conditions causing breakage, by dnf-upgrading and identifying the components that cause it. It is not going well (partial dnf upgrades on rawhide, followed by reboot, cause reboot hangs). I'll try one last time and will update the bz with any info I can find.

[oblitum]

I get that warn too the first time I run podman on my machine, afterwards it doesn't show up anymore, until I reboot.

[viceice]

A workaround for the permission issue on docker-desktop:

https://github.com/docker/for-win/issues/4627
https://github.com/docker/for-mac/issues/3838

[github-actions[bot]]

This issue had no activity for 30 days. In the absence of activity or the "do-not-close" label, the issue will be automatically closed within 7 days.

[cho2]

OS: openSUSE Leap 15.1

[rhatdan]

https://github.com/containers/libpod/pull/4350 will at least get us the output of what the error is. and this has been merged upstream. If someone could try this out and tell us why slirp4netns is failing.

[stderr-enst]

1.6.3 should contain #4350, right?
Any idea when the projectatomic ppa will ship 1.6.3 for ubuntu 18.04?
I would provide the output to this bug, but I don't have the time right now to build podman myself on this machine.

[TomSweeneyRedHat]

@stderr-enst yes, 1.6.3 includes the changs from #4350. IDK about the shipping time to ubuntu, if anyone would it would be @lsm5

[rufoa]

1.6.3 should contain #4350, right?
Any idea when the projectatomic ppa will ship 1.6.3 for ubuntu 18.04?
I would provide the output to this bug, but I don't have the time right now to build podman myself on this machine.

Just built the deb for 1.6.3 manually
Can confirm this issue is resolved on both Ubuntu and Debian