Not able to get it to work on Rootless Docker

Open
  • Is something wrong?
#5,091 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Active
Tech stack
docker, rust
Domain
backend

Research direction

Reproduce on rootless Docker with the commands given, then trace the stage Docker sandbox bundle error from the backend that issues remount-ro on the overlay2 merged control channel. Check how mount flags are set for rootless environments. Done means openshell sandbox create runs without the 500 permission error.

Written by the indexing model from the issue text.

Description

state:triage-needed
User Story

openshell-gateway --port 1111 --disable-tls --config ~/.config/openshell/gateway.toml

openshell sandbox create --name demo --no-auto-providers

✗ Error: BoundaryConfigWriteFailed: stage Docker sandbox bundle: Docker responded with status code 500: remount-ro /mnt/.docker/overlay2/81491c5d0bcf546a917a6f6ab34ffed019ac44fb536f18191238703119627f42/merged/.openshell/channel/control, flags: 0x5021: operation not permitted
✓ Sandbox allocated (0s)
✓ Image already present (0s)                                                                                                                       Error:   x sandbox entered error phase while provisioning: BoundaryConfigWriteFailed: stage Docker sandbox bundle: Docker responded with status code
  | 500: remount-ro /mnt/.docker/overlay2/81491c5d0bcf546a917a6f6ab34ffed019ac44fb536f18191238703119627f42/merged/.openshell/channel/control,
  | flags: 0x5021: operation not permitted
Problem Statement

When trying to run openshell on a machine with Rootless kit docker, it fails

Impact / Why This Matters

Users with rootlless kit docker installed are unable to use openshell

Acceptance Criteria

Running the openshell sandbox create --name demo --no-auto-providers or similar commands should not give error

Reproduction Steps
  • Linux Mint 21 (kernel 5.15 ish)
  • Ensure rootless docker instead of normal Docker
  • Start the gateway on whatever port (1111 in my case)
  • Run openshell sandbox create --name demo --no-auto-providers
Suggested UX (if applicable)

No response

Environment
openshell --version                                                                  
openshell 0.1.6

 cat /etc/os-release 
NAME="Linux Mint"
VERSION="21 (Vanessa)"
ID=linuxmint
ID_LIKE="ubuntu debian"
PRETTY_NAME="Linux Mint 21"
VERSION_ID="21"
HOME_URL="https://www.linuxmint.com/"
SUPPORT_URL="https://forums.linuxmint.com/"
BUG_REPORT_URL="http://linuxmint-troubleshooting-guide.readthedocs.io/en/latest/"
PRIVACY_POLICY_URL="https://www.linuxmint.com/"
VERSION_CODENAME=vanessa
UBUNTU_CODENAME=jammy

openshell installed via Github release .deb amd64

Logs
Dominant language
Rust
Stars
20.6k
Forks
2k
Avg merge
2d 13h
Merged PRs (30d)
283

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from NVIDIA/OpenShell

All issues in NVIDIA/OpenShell

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.