Description
docker run --pid=host fails with mounting "proc" to rootfs at "/proc" caused: operation not permitted on rootless
Steps to reproduce the issue:
dockerd-rootless.sh
docker -H unix:///run/user/1001/docker.sock run --rm --pid=host hello-world
Describe the results you received:
docker: Error response from daemon: OCI runtime create failed: container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: rootfs_linux.go:60: mounting "proc" to rootfs at "/proc" caused: operation not permitted: unknown.
Describe the results you expected:
Shouldn't fail
Output of docker version:
Client:
Version: 20.03.0-dev
API version: 1.41
Go version: go1.13.15
Git commit: e0eba83bd
Built: Wed Sep 16 10:08:53 2020
OS/Arch: linux/amd64
Context: default
Experimental: true
Server:
Engine:
Version: dev
API version: 1.41 (minimum version 1.12)
Go version: go1.13.15
Git commit: f99814d749
Built: Wed Sep 16 10:07:13 2020
OS/Arch: linux/amd64
Experimental: true
containerd:
Version: v1.4.0-81-g373cbc2a
GitCommit: 373cbc2a7f5469b2a833660ba2f474cf4f947d32
runc:
Version: 1.0.0-rc92+dev
GitCommit: 892477ca26638b214dc79150a09ba3565b93137d
docker-init:
Version: 0.19.0
GitCommit: de40ad0
Output of docker info:
Client:
Context: default
Debug Mode: false
Plugins:
buildx: Build with BuildKit (Docker Inc., v0.4.1)
Server:
Containers: 0
Running: 0
Paused: 0
Stopped: 0
Images: 5
Server Version: dev
Storage Driver: overlay2
Backing Filesystem: extfs
Supports d_type: true
Native Overlay Diff: false
Logging Driver: json-file
Cgroup Driver: none
Cgroup Version: 1
Plugins:
Volume: local
Network: bridge host ipvlan macvlan null overlay
Log: awslogs fluentd gcplogs gelf journald json-file local logentries splunk syslog
Swarm: inactive
Runtimes: io.containerd.runc.v2 io.containerd.runtime.v1.linux runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 373cbc2a7f5469b2a833660ba2f474cf4f947d32
runc version: 892477ca26638b214dc79150a09ba3565b93137d
init version: de40ad0
Security Options:
seccomp
Profile: default
rootless
Kernel Version: 5.4.0-47-generic
Operating System: Ubuntu 20.04.1 LTS
OSType: linux
Architecture: x86_64
CPUs: 2
Total Memory: 7.748GiB
Name: suda-ws01
ID: CWVR:KJQU:3CNT:IJF7:FMME:22Y7:GKFW:AFKJ:IVLQ:JOVW:3KZY:S25M
Docker Root Dir: /home/suda/.local/share/docker
Debug Mode: false
Username: akihirosuda
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
127.0.0.0/8
Live Restore Enabled: false
WARNING: Running in rootless-mode without cgroups. To enable cgroups in rootless-mode, you need to boot the system in cgroup v2 mode.
Description
docker run --pid=hostfails withmounting "proc" to rootfs at "/proc" caused: operation not permittedon rootlessSteps to reproduce the issue:
dockerd-rootless.shdocker -H unix:///run/user/1001/docker.sock run --rm --pid=host hello-worldDescribe the results you received:
Describe the results you expected:
Shouldn't fail
Output of
docker version:Output of
docker info: