[Docker Rootless] Container fails to run when /proc hidepid=2 is set in fstab file
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 30/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- docker, linux
- Domain
- devops, operating-systems
Research direction
No file, test, or entry point is named in the issue. Start by reproducing rootless Docker with hidepid=2 configured in fstab, then investigate the process-visibility requirement and document a workaround that preserves hidepid=2.
Written by the indexing model from the issue text.
Description
It appears that Docker rootless needs to see other processes in order to function properly. I encountered this problem while hardening a Linux machine. setting hidepid=2 will stop container to run. What is a workaround that still maintains the hidepid=2 option?
- Dominant language
- Shell
- Stars
- 3.2k
- Forks
- 863
- Avg merge
- 3h 15m
- Merged PRs (30d)
- 2
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from docker/docker-install
-
Difficulty 3/5 1-2 days Newbie friendliness 68/100
docker/docker-install#575 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 55/100
docker/docker-install#559 · 4 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 55/100
docker/docker-install#554 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 48/100
docker/docker-install#548 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 55/100
docker/docker-install#540 ·
All issues in docker/docker-install
Similar issues
-
align on terminology Open
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
CycloneDX/transparency-exchange-api#393 · 1 comment ·
-
module/agent platform/macos type/bug/regression
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
-
Difficulty 1/5 Under an hour Newbie friendliness 92/100
CachyOS/cachyos-aur-derived#754 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 90/100
CrowdStrike/falcon-scripts#528 ·
-
bug(cli): hapi doctor inline-media prints a fabricated B:\ helper-script path in packaged installs Open
Difficulty 2/5 1-3 hours Newbie friendliness 70/100