[pkg-go] Bug#979313: podman - fails with: Error: open /proc/sys/net/ipv4/ping_group_range: Permission denied

[Bastian Blank]

Package: podman
Version: 2.1.1+dfsg1-3
Severity: grave

The podman version in unstable fails to run anything without root
permissions:

| $ podman run --rm --net host docker.io/library/debian:bullseye-slim echo test; echo $?
| Error: open /proc/sys/net/ipv4/ping_group_range: Permission denied: OCI runtime permission denied error
| 126

Upgrading to 2.2.1+dfsg1-1 fixes it:

| $ podman run --rm --net host docker.io/library/debian:bullseye-slim echo test
| test

Bastian

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-1-amd64 (SMP w/12 CPU threads)
Kernel taint flags: TAINT_WARN, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages podman depends on:
ii  conmon                           2.0.20-1
ii  containernetworking-plugins      0.8.7-1
ii  crun                             0.15.1+dfsg-1
ii  golang-github-containers-common  0.26.3+ds1-2
ii  init-system-helpers              1.60
ii  libc6                            2.31-6
ii  libdevmapper1.02.1               2:1.02.173-1
ii  libgpgme11                       1.14.0-1+b2
ii  libseccomp2                      2.5.1-1

Versions of packages podman recommends:
ii  buildah                                           1.16.6+dfsg1-2
pn  catatonit | tini | dumb-init                      <none>
ii  fuse-overlayfs                                    1.2.0-1
pn  golang-github-containernetworking-plugin-dnsname  <none>
pn  slirp4netns                                       <none>
ii  uidmap                                            1:4.8.1-1

Versions of packages podman suggests:
pn  containers-storage  <none>

-- no debconf information