<div dir="ltr"><div class="gmail_default" style="font-family:courier new,monospace"><br></div><div class="gmail_default" style="font-family:courier new,monospace">I wonder whether this may be related to upstream report at <a href="https://github.com/containers/common/issues/631">https://github.com/containers/common/issues/631</a></div><div class="gmail_default" style="font-family:courier new,monospace"><br></div><div class="gmail_default" style="font-family:courier new,monospace">It seems that in debian/bullseye, podman is only able to work in crun, since the version of runc we have in stable seems to have issues with seccomp. Can you please try the following for me with both crun and runc installed:</div><div class="gmail_default" style="font-family:courier new,monospace"><br></div><div class="gmail_default" style="font-family:courier new,monospace">root@pve:~# podman run --runtime runc --security-opt=seccomp=unconfined --rm -it debian date<br>Mon May 30 19:18:05 UTC 2022<br><br></div><div class="gmail_default" style="font-family:courier new,monospace">That does appear to work at least on my system.</div><div class="gmail_default" style="font-family:courier new,monospace"><br></div><div class="gmail_default" style="font-family:courier new,monospace">This might indicate that this is actually a change that needs to go into golang-github-containers-common then...</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, May 30, 2022 at 9:15 AM Vicente Olivert Riera <<a href="mailto:vincent.olivert.riera@gmail.com">vincent.olivert.riera@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">I've found the problem appears to be between podman and runc.<br>
<br>
I have runc installed in my system because I also use <a href="http://docker.io" rel="noreferrer" target="_blank">docker.io</a>, and <br>
that package depends on it.<br>
runc is also a dependency of podman, so podman uses it. However, podman <br>
can also use crun. But, since runc was already installed, and podman can <br>
depend on either of them, crun was not installed as a dependecy.<br>
<br>
Now, if I manually install crun, podman works again and the error is <br>
gone. I think if podman finds that crun is installed, it will use it. <br>
Otherwise it will use runc as a fallback.<br>
<br>
Since both runc and crun packages can coexist in the system, I think a <br>
quick fix could be removing the runc dependency on podman, so it will <br>
always pull in crun as a dependency. At least until the root cause of <br>
this problem is found and fixed.<br>
</blockquote></div><br clear="all"><div><br></div>-- <br><div dir="ltr" class="gmail_signature">regards,<br> Reinhard</div>