Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-3108

podman can't create network with error "creating locker directory: mkdir /etc/containers/networks: permission denied"

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • rhel-9.2.0
    • podman
    • None
    • Important
    • rhel-sst-container-tools
    • 3
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • If docs needed, set a value
    • None

      Description of problem:
      Create podman network with command:
      sudo podman --log-level debug network create --driver=bridge --subnet=192.168.200.0/24 --gateway=192.168.200.254 edge

      Failure with error:
      Error: creating locker directory: mkdir /etc/containers/networks: permission denied

      Detailed log:
      level=info msg="podman filtering at log level debug"
      level=debug msg="Called create.PersistentPreRunE(podman --log-level debug network create --driver=bridge --subnet=192.168.200.0/24 --gateway=192.168.200.254 edge)"
      level=debug msg="Merged system config \"/usr/share/containers/containers.conf\""
      level=debug msg="Using conmon: \"/usr/bin/conmon\""
      level=debug msg="Initializing boltdb state at /var/lib/containers/storage/libpod/bolt_state.db"
      level=debug msg="Using graph driver overlay"
      level=debug msg="Using graph root /var/lib/containers/storage"
      level=debug msg="Using run root /run/containers/storage"
      level=debug msg="Using static dir /var/lib/containers/storage/libpod"
      level=debug msg="Using tmp dir /run/libpod"
      level=debug msg="Using volume path /var/lib/containers/storage/volumes"
      level=debug msg="Set libpod namespace to \"\""
      level=debug msg="[graphdriver] trying provided driver \"overlay\""
      level=debug msg="Cached value indicated that overlay is supported"
      level=debug msg="Cached value indicated that overlay is supported"
      level=debug msg="Cached value indicated that metacopy is being used"
      level=debug msg="Cached value indicated that native-diff is not being used"
      level=info msg="Not using native diff for overlay, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled"
      level=debug msg="backingFs=xfs, projectQuotaSupported=false, useNativeDiff=false, usingMetacopy=true"
      level=debug msg="Initializing event backend file"
      level=debug msg="Configured OCI runtime runc initialization failed: no valid executable found for OCI runtime runc: invalid argument"
      level=debug msg="Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument"
      level=debug msg="Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument"
      level=debug msg="Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument"
      level=debug msg="Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument"
      level=debug msg="Using OCI runtime \"/usr/bin/crun\""
      Error: creating locker directory: mkdir /etc/containers/networks: permission denied

      This issue can be found since RHEL 9.2 compose RHEL-9.2.0-20221202.3(crun has been update to crun-1.7.2-1.el9.x86_64). Compose RHEL-9.2.0-20221129.2(crun keeps at crun-1.7.1-1.el9.x86_64) does not have this issue.
      The last log shows OCI run time. So this issue might be related with crun update from crun-1.7.1-1.el9.x86_64 to crun-1.7.2-1.el9.x86_64.

      Version-Release number of selected component (if applicable):
      podman-2:4.3.1-3.el9.x86_64
      container-selinux-3:2.193.0-1.el9.noarch
      containers-common-2:1-46.el9.x86_64
      crun-1.7.2-1.el9.x86_64

      How reproducible:

      Steps to Reproduce:
      1. Deploy RHEL 9.2 openstack VM with repo since RHEL-9.2.0-20221202.3
      2. Run command "sudo podman --log-level debug network create --driver=bridge --subnet=192.168.200.0/24 --gateway=192.168.200.254 edge"

      Actual results:
      Failed with error.

      Expected results:
      Success.

      Additional info:

              mheon@redhat.com Matt Heon
              xiaofwan@redhat.com Xiaofeng Wang
              Edward Shen Edward Shen
              Votes:
              0 Vote for this issue
              Watchers:
              17 Start watching this issue

                Created:
                Updated: