[pkg-go] Bug#1012053: podman - fails to run container as root: container create failed (no logs from conmon)

[Bastian Blank]

Package: podman
Version: 4.1.0+ds2-2
Severity: important
X-Debbugs-Cc: waldi at debian.org

podman currently fails to create any container as root.  It always fails
with:

| % sudo podman run --rm --network host debian:sid-slim
| Error: container create failed (no logs from conmon): conmon bytes "": readObjectStart: expect { or n, but found , error found in #0 byte of ...||..., bigger context ...||...

Internally, crun fails after a quick check of /proc/self/uid_map, but is
silent why.

| openat(AT_FDCWD, "/sys/fs/cgroup/machine.slice/libpod-45964672ec0043cbf4908f23824ae0a4cf1b5d244fbd72e9ace8c396beb38b25.scope/container", O_RDONLY|O_DIRECTORY) = 6
| geteuid()                               = 0
| openat(AT_FDCWD, "/proc/self/uid_map", O_RDONLY) = 7
| statx(7, "", AT_STATX_DONT_SYNC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH, STATX_SIZE, {stx_mask=STATX_BASIC_STATS|STATX_MNT_ID, stx_attributes=0, stx_mode=S_IFREG|0644, stx_size=0, ...}) = 0
| read(7, "         0          0 4294967295\n", 4096) = 33
| read(7, "", 8159)                       = 0
| close(7)                                = 0
| close(6)                                = 0
| kill(3729, SIGKILL)                     = 0

Bastian

-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (700, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.17.0-3-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages podman depends on:
ii  conmon                           2.1.0+ds1-1
ii  containernetworking-plugins      1.1.0+ds1-1+b1
ii  crun                             0.17+dfsg-1.1+b1
ii  golang-github-containers-common  0.44.5+ds1-1
ii  libc6                            2.33-7
ii  libdevmapper1.02.1               2:1.02.175-2.1
ii  libgpgme11                       1.16.0-1.2
ii  libseccomp2                      2.5.4-1

Versions of packages podman recommends:
ii  buildah                                           1.23.1+ds1-2+b1
pn  catatonit | tini | dumb-init                      <none>
ii  fuse-overlayfs                                    1.8.2-1
pn  golang-github-containernetworking-plugin-dnsname  <none>
ii  slirp4netns                                       1.0.1-2
ii  uidmap                                            1:4.11.1+dfsg1-2

Versions of packages podman suggests:
pn  containers-storage  <none>
pn  docker-compose      <none>
ii  iptables            1.8.8-1

-- no debconf information