[pkg-go] Bug#970352: unprivileged podman dies with gibberish

Tue Sep 15 16:05:25 BST 2020

Control: tag -1 moreinfo

Hi Harald,

On Tue, Sep 15, 2020 at 1:51 AM Harald Dunkel <harri at afaics.de> wrote:

> Package: podman
> Version: 2.0.6+dfsg1-1
>
> Unprivileged podman dies with some gibberish instead of a readable
> error message:
>
> % podman run -it debian /bin/bash
> Trying to pull quay.io/debian...
>    error parsing HTTP 404 response body: invalid character '<' looking for
> beginning of value: "<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2
> Final//EN\">\n<title>404 Not Found</title>\n<h1>Not Found</h1>\n<p>The
> requested URL was not found on the server. If you entered the URL manually
> please check
> your spelling and try again.</p>\n"
> Trying to pull docker.io/library/debian...
> Getting image source signatures
> Copying blob 57df1a1f1ad8 done
> Copying config f6dcff9b59 done
> Writing manifest to image destination
> Storing signatures
> ERRO[0010] Error while applying layer: ApplyLayer exit status 1 stdout:
> stderr: there might not be enough IDs available in the namespace (requested
> 0:42 for /etc/gshadow): lchown /etc/gshadow: invalid argument
>    ApplyLayer exit status 1 stdout:  stderr: there might not be enough IDs
> available in the namespace (requested 0:42 for /etc/gshadow): lchown
> /etc/gshadow: invalid argument
>

I think this is the relevant error message. May I ask a couple of questions:

   1. Did this work with an earlier verison of podman, i.e., is this a
   regression? What version worked for you before?
   2. Does the problem go away after a reboot?
   3. Does the command 'unshare -nr id' work for you?
   4. Did you read the file /usr/share/doc/podman/README.Debian, in
   particular the parts "User Namespaces" and "Troubleshooting rootless mode"?

Best,
-rt

-- 
regards,
    Reinhard
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20200915/1d6c3715/attachment.html>