<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:courier new,monospace">Control: tag -1 moreinfo</div><div class="gmail_default" style="font-family:courier new,monospace"><br></div><div class="gmail_default" style="font-family:courier new,monospace">Hi Harald,</div><div class="gmail_default" style="font-family:courier new,monospace"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Tue, Sep 15, 2020 at 1:51 AM Harald Dunkel <<a href="mailto:harri@afaics.de">harri@afaics.de</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Package: podman<br>
Version: 2.0.6+dfsg1-1<br>
<br>
Unprivileged podman dies with some gibberish instead of a readable<br>
error message:<br>
<br>
% podman run -it debian /bin/bash<br>
Trying to pull <a href="http://quay.io/debian." rel="noreferrer" target="_blank">quay.io/debian.</a>..<br>
error parsing HTTP 404 response body: invalid character '<' looking for beginning of value: "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2 Final//EN\">\n<title>404 Not Found</title>\n<h1>Not Found</h1>\n<p>The requested URL was not found on the server. If you entered the URL manually please check <br>
your spelling and try again.</p>\n"<br>
Trying to pull <a href="http://docker.io/library/debian." rel="noreferrer" target="_blank">docker.io/library/debian.</a>..<br>
Getting image source signatures<br>
Copying blob 57df1a1f1ad8 done<br>
Copying config f6dcff9b59 done<br>
Writing manifest to image destination<br>
Storing signatures<br>
ERRO[0010] Error while applying layer: ApplyLayer exit status 1 stdout: stderr: there might not be enough IDs available in the namespace (requested 0:42 for /etc/gshadow): lchown /etc/gshadow: invalid argument<br>
ApplyLayer exit status 1 stdout: stderr: there might not be enough IDs available in the namespace (requested 0:42 for /etc/gshadow): lchown /etc/gshadow: invalid argument<br></blockquote><div><br></div><div><div class="gmail_default" style="font-family:"courier new",monospace">I think this is the relevant error message. May I ask a couple of questions:<br><br><ol><li>Did this work with an earlier verison of podman, i.e., is this a regression? What version worked for you before?</li><li>Does the problem go away after a reboot?</li><li>Does the command 'unshare -nr id' work for you?</li><li>Did you read the file /usr/share/doc/podman/README.Debian, in particular the parts "User Namespaces" and "Troubleshooting rootless mode"?<br></li></ol><div><br></div><div>Best,<br>-rt</div></div></div></div><div><br></div>-- <br><div dir="ltr" class="gmail_signature">regards,<br> Reinhard</div></div>