Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Install of RPM package fails - /proc: cpio: chown #278

Open
dg424 opened this issue Nov 16, 2021 · 0 comments
Open

Install of RPM package fails - /proc: cpio: chown #278

dg424 opened this issue Nov 16, 2021 · 0 comments
Labels
question Further information is requested

Comments

@dg424
Copy link

dg424 commented Nov 16, 2021

Hi,

Is there a reason that chmod on /proc does not work under rootless ? It works fine on standard Docker (i.e. non-privileged mode). We're using rootless to primarily disable the use of --privileged. Was hoping that the rest of Docker functionality would remain the same.

Test:

$ docker run --rm -d --privileged --name dind -e DOCKER_TLS_CERTDIR="" -p 2375:2375 docker:dind-rootless /usr/local/bin/dockerd-entrypoint.sh --tls=false
b631b1ccac4dfed8b8ff3c4a85230fac123e166a1a14bc8af7a7ad9e2c19fad4
$ export DOCKER_HOST=127.0.0.1:2375
$ docker run --rm -it centos:7 bash
Unable to find image 'centos:7' locally
7: Pulling from library/centos
2d473b07cdd5: Pull complete 
Digest: sha256:9d4bcbbb213dfd745b58be38b13b996ebb5ac315fe75711bd618426a630e0987
Status: Downloaded newer image for centos:7
[root@533070923f65 /]# chmod 777 /proc
chmod: changing permissions of '/proc': Operation not permitted

Ok, now try with the host Docker daemon, no privileged mode or anything special:

$ unset DOCKER_HOST
$ docker run --rm -it centos:7 bash
[root@24697768a1a7 /]# chmod 777 /proc
[root@24697768a1a7 /]# <--- no error, works
@AkihiroSuda AkihiroSuda added the question Further information is requested label Nov 18, 2021
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants