<div dir="ltr"><div class="gmail_default" style="font-family:courier new,monospace">Control: tag -1 +upstream +moreinfo</div><div class="gmail_default" style="font-family:courier new,monospace"><br></div><div class="gmail_default" style="font-family:courier new,monospace">Hi Hristo,<br><br>Thanks for taking the time to report this issue. In the meantime, podman 4.5 is now in debian/testing (and 4.6.2 in debian/experimental). Can you please upgrade your package and give it another try? If you're right, you shouldn't see this issue anymore. Please report back so that I can mark this as fixed in the Debian bug tracker.<br><br>Best,<br>-rt</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jul 26, 2023 at 10:51 AM Hristo Venev <<a href="mailto:hristo@venev.name">hristo@venev.name</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Package: podman<br>
Version: 4.3.1+ds1-8+b1<br>
Severity: normal<br>
X-Debbugs-Cc: <a href="mailto:hristo@venev.name" target="_blank">hristo@venev.name</a><br>
<br>
Dear Maintainer,<br>
<br>
When trying to run a container using podman (as root) with a uid/gid<br>
mapping specified via `--userns`, it fails to start:<br>
<br>
> # podman run --rm --userns auto:uidmapping=1000:1001:1,gidmapping=1000:1001:1 debian:12<br>
> ERRO[0000] Unmounting /var/lib/containers/storage/overlay/INSERT_ID_HERE/merged: invalid argument<br>
> Error: mounting storage for container INSERT_ANOTHER_ID_HERE: creating overlay mount to /var/lib/containers/storage/overlay/INSERT_ID_HERE/merged, mount_data="lowerdir=/var/lib/containers/storage/overlay/INSERT_ID_HERE/mapped/0/l/INSERT_SHORT_ID_HERE:/var/lib/containers/storage/overlay/INSERT_ID_HERE/mapped/0/l/diff1:/var/lib/containers/storage/overlay/INSERT_ID_HERE/mapped/0/l/INSERT_ANOTHER_SHORT_ID_HERE,upperdir=/var/lib/containers/storage/overlay/INSERT_ID_HERE/diff,workdir=/var/lib/containers/storage/overlay/INSERT_ID_HERE/work,,volatile": permission denied<br>
<br>
The following appears in the kernel log:<br>
> [TIME] overlayfs: failed to resolve '/var/lib/containers/storage/overlay/INSERT_ID_HERE/mapped/0/l/INSERT_SHORT_ID_HERE': -13<br>
<br>
The outcome is listed above. The expected outcome was that the container<br>
would start, with most IDs mapped from those delegated to the<br>
`containers` user, except uid/gid 1000 inside the container which<br>
correspond to 1001 outside.<br>
<br>
Running the container with just `--userns auto` works. However, then all<br>
files passed to the container via bind mounts would be owned by<br>
nobody:nogroup instead of 1000:1000.<br>
<br>
This seems similar to <a href="https://github.com/containers/podman/issues/18435" rel="noreferrer" target="_blank">https://github.com/containers/podman/issues/18435</a>,<br>
which was probably fixed in podman 4.5.0.<br>
<br>
-- System Information:<br>
Debian Release: trixie/sid<br>
APT prefers testing<br>
APT policy: (500, 'testing')<br>
Architecture: amd64 (x86_64)<br>
<br>
Kernel: Linux 6.3.0-1-amd64 (SMP w/24 CPU threads; PREEMPT)<br>
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set<br>
Shell: /bin/sh linked to /usr/bin/dash<br>
Init: systemd (via /run/systemd/system)<br>
<br>
Versions of packages podman depends on:<br>
ii conmon 2.1.6+ds1-1<br>
ii crun 1.8.5-1<br>
ii golang-github-containers-common 0.50.1+ds1-4<br>
ii libc6 2.37-6<br>
ii libdevmapper1.02.1 2:1.02.185-2<br>
ii libgpgme11 1.18.0-3+b1<br>
ii libseccomp2 2.5.4-1+b3<br>
ii libsubid4 1:4.13+dfsg1-1+b1<br>
<br>
Versions of packages podman recommends:<br>
pn buildah <none><br>
pn catatonit | tini | dumb-init <none><br>
pn dbus-user-session <none><br>
pn fuse-overlayfs <none><br>
pn slirp4netns <none><br>
pn uidmap <none><br>
<br>
Versions of packages podman suggests:<br>
pn containers-storage <none><br>
pn docker-compose <none><br>
ii iptables 1.8.9-2<br>
<br>
-- no debconf information<br>
<br>
</blockquote></div><br clear="all"><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature">regards,<br> Reinhard</div>