mgoltzsche/podman-static

cannot clone: Operation not permitted

pinghe opened this issue · 3 comments

pinghe commented

When I use it in github actions, I get the following error.

cannot clone: Operation not permitted
Error: cannot re-exec process

Workflow configuration file cd.yml:

name: test podman
on:
  push:
    branches:
    - main

    # Publish `v1.2.3` tags as releases.
    tags:
    - v*

jobs:
  build:
    runs-on: ubuntu-latest
    container:
      # image: gitlab/gitlab-runner:alpine3.18
      # image: mgoltzsche/podman:rootless
      # image: mgoltzsche/podman:minimal
      image: mgoltzsche/podman:latest
      options: --privileged 
      # --user podman:podman
    env:
      FORCE_COLOR: 1
    steps:
    - run: echo "🎉 The job was automatically triggered by a ${{ gitea.event_name }} event."  
    - name: test podman
      run: |
        whoami
        podman info
mgoltzsche commented

Looks like the environment lacks some permissions/capabilities - it doesn't seem to be privileged.
(Fwiw GitHub's ubuntu runner comes with podman preinstalled.)

pinghe commented

Yes, GitHub's ubuntu runner is too large, so I'd like to use this container image.
I'm using gitea, deployed on k8s. The above problem encountered( This is only an issue when using alpine container images. Other containers do not have this problem, e.g. library/node:18-bullseye )

pinghe commented

The issue has been solved. Referring to containers/podman#10802, add --security-opt seccomp=unconfined

  • 👍1