Description
--remap-labels fails with "permission denied`
Steps to reproduce the issue:
[proxy_plugins]
[proxy_plugins."fuse-overlayfs"]
type = "snapshot"
address = "/run/containerd/fuse-overlayfs.sock"
$ sudo containerd
$ sudo containerd-fuse-overlayfs-grpc /run/containerd/fuse-overlayfs.sock /tmp/foo
- Run a container with
--uidmap --gidmap --remap-labels
$ sudo ctr images pull --snapshotter=fuse-overlayfs docker.io/library/alpine:latest
$ sudo ctr run -t --rm --snapshotter fuse-overlayfs --uidmap 0:5000:65535 --gidmap 0:5000:65535 --remap-labels docker.io/library/alpine:latest test
ctr: OCI runtime create failed: container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: rootfs_linux.go:46: preparing rootfs caused: permission denied: unknown
Describe the results you received:
ctr: OCI runtime create failed: container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: rootfs_linux.go:46: preparing rootfs caused: permission denied: unknown
Describe the results you expected:
Should work
Output of containerd --version:
containerd github.com/containerd/containerd v1.4.0-beta.2-2-g4bec2dbd 4bec2dbd4f23be6d3bc034330df72e45eedc1838
runc: opencontainers/runc@b7d8f3b
Description
--remap-labelsfails with "permission denied`Steps to reproduce the issue:
/etc/containerd/config.toml--uidmap --gidmap --remap-labelsDescribe the results you received:
ctr: OCI runtime create failed: container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: rootfs_linux.go:46: preparing rootfs caused: permission denied: unknownDescribe the results you expected:
Should work
Output of
containerd --version:runc: opencontainers/runc@b7d8f3b