Ich kämpfe gerade mit Distrobox unter Tumbleweed. Ziel ist, einen weiteren Container mit Tumbleweed einzurichten und zu starten.
Bisher habe ich folgendes zustande gebracht:
Code
geeko@linux:~> distrobox create -i registry.opensuse.org/opensuse/tumbleweed:latest -n tumbleweed -I
Trying to pull registry.opensuse.org/opensuse/tumbleweed:latest...
Getting image source signatures
Copying blob 28117a4f4342 done |
Error: unable to copy from source docker://registry.opensuse.org/opensuse/tumbleweed:latest: copying system image from manifest list: writing blob: adding layer with blob "sha256:28117a4f43421e6eae1cecbb250965b3f29c5ff1f9e24d0c00b61dd36943bdd1"/""/"sha256:5019bdde08a4c842c1345f644cb6bcefe6cb2c9bb05fdec4ec0ec5bfc8f74554": unpacking failed (error: exit status 1; output: potentially insufficient UIDs or GIDs available in user namespace (requested 0:15 for /etc/shadow): Check /etc/subuid and /etc/subgid if configured locally and run "podman system migrate": lchown /etc/shadow: invalid argument)
geeko@linux:~> sudo usermod --add-subuids 10000-75535 $(whoami)
[sudo] Passwort für root:
geeko@linux:~> sudo usermod --add-subgids 10000-75535 $(whoami)
geeko@linux:~> sudo echo "$(whoami):10000:65536" >> /etc/subuid
bash: /etc/subuid: Keine Berechtigung
geeko@linux:~> su
Passwort:
linux:/home/geeko # echo "$(whoami):10000:65536" >> /etc/subuid
linux:/home/geeko # echo "$(whoami):10000:65536" >> /etc/subgid
linux:/home/geeko # exit
exit
geeko@linux:~> distrobox create -i registry.opensuse.org/opensuse/tumbleweed:latest -n tumbleweed -I
Trying to pull registry.opensuse.org/opensuse/tumbleweed:latest...
Getting image source signatures
Copying blob 28117a4f4342 done |
Error: unable to copy from source docker://registry.opensuse.org/opensuse/tumbleweed:latest: copying system image from manifest list: writing blob: adding layer with blob "sha256:28117a4f43421e6eae1cecbb250965b3f29c5ff1f9e24d0c00b61dd36943bdd1"/""/"sha256:5019bdde08a4c842c1345f644cb6bcefe6cb2c9bb05fdec4ec0ec5bfc8f74554": unpacking failed (error: exit status 1; output: potentially insufficient UIDs or GIDs available in user namespace (requested 0:15 for /etc/shadow): Check /etc/subuid and /etc/subgid if configured locally and run "podman system migrate": lchown /etc/shadow: invalid argument)
geeko@linux:~> podman system migrate
geeko@linux:~> distrobox rm tumbleweed
Removing container...
tumbleweed
Removing exported binaries...
geeko@linux:~> distrobox create -i registry.opensuse.org/opensuse/tumbleweed:latest -n tw-entwicklerbox -I
Creating 'tw-entwicklerbox' using image registry.opensuse.org/opensuse/tumbleweed:latest [ OK ]
Distrobox 'tw-entwicklerbox' successfully created.
To enter, run:
distrobox enter tw-entwicklerbox
geeko@linux:~> distrobox enter tw-entwicklerbox
Error: unable to start container "e7165996c4fcfb48ea602e24883f89aecd0f131ff3b500696fb9923d771aff1a": runc: runc create failed: unable to start container process: error during container init: error mounting "/dev/vboxusb/001/003" to rootfs at "/dev/vboxusb/001/003": create mountpoint for /dev/vboxusb/001/003 mount: lookup mountpoint target: securejoin.OpenInRoot /dev/vboxusb/001/003: openat2 /dev/vboxusb/001/003: permission denied: OCI permission deniedWie setze ich diese OCI permission? Irgendwo habe ich auch recherchiert, dass Apparmor etwas damit zu tun haben könnte.
