Skip to content

--remap-labels fails with "permission denied` #4391

@AkihiroSuda

Description

@AkihiroSuda

Description

--remap-labels fails with "permission denied`

Steps to reproduce the issue:

[proxy_plugins]
  [proxy_plugins."fuse-overlayfs"]
    type = "snapshot"
    address = "/run/containerd/fuse-overlayfs.sock"
  • Start the daemons
$ sudo containerd
$ sudo containerd-fuse-overlayfs-grpc /run/containerd/fuse-overlayfs.sock /tmp/foo
  • Run a container with --uidmap --gidmap --remap-labels
$ sudo ctr images pull  --snapshotter=fuse-overlayfs docker.io/library/alpine:latest
$ sudo ctr run -t --rm --snapshotter fuse-overlayfs --uidmap 0:5000:65535 --gidmap 0:5000:65535 --remap-labels  docker.io/library/alpine:latest  test
ctr: OCI runtime create failed: container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: rootfs_linux.go:46: preparing rootfs caused: permission denied: unknown

Describe the results you received:

ctr: OCI runtime create failed: container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: rootfs_linux.go:46: preparing rootfs caused: permission denied: unknown

Describe the results you expected:
Should work

Output of containerd --version:

containerd github.com/containerd/containerd v1.4.0-beta.2-2-g4bec2dbd 4bec2dbd4f23be6d3bc034330df72e45eedc1838

runc: opencontainers/runc@b7d8f3b

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions