Uploaded image for project: 'Container Tools'
  1. Container Tools
  2. RUN-2300

[containers/podman] Podman fail to autostart containers through quadlet/systemd, works when launched manually, error with pasta

XMLWordPrintable

    • 3
    • False
    • None
    • False
    • rhel-sst-container-tools
    • RUN 261

      [2212985502] Upstream Reporter: Froggy232
      Upstream issue status: Closed
      Upstream description:

      Issue Description

      Hi, Since the upgrade to Fedora Silverblue 40 / Podman 5, systemd fail to launch containers at boot. If I try to launch them manually through systemctl --user start container.service, it works as expected. Thanks you!

      Steps to reproduce the issue

      Steps to reproduce the issue

      1. Automatize the gestion of container through quadlet / ~/.config/containers/systemd files
      2. Restart the server and see that containers failed to launch

      Describe the results you received

      Containers doesn't launch at boot, needs to be started manually

      Describe the results you expected

      Containers should start at boot.

      podman info output

      host:   arch: amd64
        buildahVersion: 1.35.1
        cgroupControllers:   - cpu
        - io
        - memory
        - pids
        cgroupManager: systemd
        cgroupVersion: v2
        conmon:     package: conmon-2.1.8-4.fc40.x86_64
          path: /usr/bin/conmon
          version: 'conmon version 2.1.8, commit: '
        cpuUtilization:     idlePercent: 99.37
          systemPercent: 0.21
          userPercent: 0.42
        cpus: 32
        databaseBackend: sqlite
        distribution:     distribution: fedora
          variant: silverblue
          version: "40"
        eventLogger: journald
        freeLocks: 2047
        hostname: homeserver
        idMappings:     gidmap:     - container_id: 0
            host_id: 1020
            size: 1
          - container_id: 1
            host_id: 1703936
            size: 65536
          uidmap:     - container_id: 0
            host_id: 1020
            size: 1
          - container_id: 1
            host_id: 1703936
            size: 65536
        kernel: 6.8.1-300.fc40.x86_64
        linkmode: dynamic
        logDriver: journald
        memFree: 64334761984
        memTotal: 67334115328
        networkBackend: netavark
        networkBackendInfo:     backend: netavark
          dns:       package: aardvark-dns-1.10.0-1.fc40.x86_64
            path: /usr/libexec/podman/aardvark-dns
            version: aardvark-dns 1.10.0
          package: netavark-1.10.3-3.fc40.x86_64
          path: /usr/libexec/podman/netavark
          version: netavark 1.10.3
        ociRuntime:     name: crun
          package: crun-1.14.4-1.fc40.x86_64
          path: /usr/bin/crun
          version: |-
            crun version 1.14.4
            commit: a220ca661ce078f2c37b38c92e66cf66c012d9c1
            rundir: /run/user/1020/crun
            spec: 1.0.0
            +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +LIBKRUN +WASM:wasmedge +YAJL
        os: linux
        pasta:     executable: /usr/bin/pasta
          package: passt-0^20240320.g71dd405-1.fc40.x86_64
          version: |
            pasta 0^20240320.g71dd405-1.fc40.x86_64
            Copyright Red Hat
            GNU General Public License, version 2 or later
              <https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
            This is free software: you are free to change and redistribute it.
            There is NO WARRANTY, to the extent permitted by law.
        remoteSocket:     exists: false
          path: /run/user/1020/podman/podman.sock
        security:     apparmorEnabled: false
          capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
          rootless: true
          seccompEnabled: true
          seccompProfilePath: /usr/share/containers/seccomp.json
          selinuxEnabled: true
        serviceIsRemote: false
        slirp4netns:     executable: ""
          package: ""
          version: ""
        swapFree: 146028879872
        swapTotal: 146028879872
        uptime: 0h 14m 2.00s
        variant: ""
      plugins:   authorization: null
        log:   - k8s-file
        - none
        - passthrough
        - journald
        network:   - bridge
        - macvlan
        - ipvlan
        volume:   - local
      registries:   search:   - registry.fedoraproject.org
        - registry.access.redhat.com
        - docker.io
        - quay.io
      store:   configFile: /var/srv/media-server/.config/containers/storage.conf
        containerStore:     number: 0
          paused: 0
          running: 0
          stopped: 0
        graphDriverName: overlay
        graphOptions: {}
        graphRoot: /srv/media-server/.local/share/containers/storage
        graphRootAllocated: 3999065440256
        graphRootUsed: 1034920087552
        graphStatus:     Backing Filesystem: btrfs
          Native Overlay Diff: "true"
          Supports d_type: "true"
          Supports shifting: "false"
          Supports volatile: "true"
          Using metacopy: "false"
        imageCopyTmpDir: /var/tmp
        imageStore:     number: 14
        runRoot: /run/user/1020/containers
        transientStore: false
        volumePath: /var/srv/media-server/.local/share/containers/storage/volumes
      version:   APIVersion: 5.0.0
        Built: 1710806400
        BuiltTime: Tue Mar 19 01:00:00 2024
        GitCommit: ""
        GoVersion: go1.22.0
        Os: linux
        OsArch: linux/amd64
        Version: 5.0.0
      

      Podman in a container

      No

      Privileged Or Rootless

      Rootless

      Upstream Latest Release

      No

      Additional environment details

      Fedora Silverblue 40 up-to-date

      Additional information

      Logs of a container :

      mars 28 12:15:09 homeserver jellyfin[7039]: Error: pasta failed with exit code 1: mars 28 12:15:09 homeserver jellyfin[7039]: External interface not usable


      Upstream URL: https://github.com/containers/podman/issues/22197

              pholzing@redhat.com Paul Holzinger
              upstream-sync Upstream Sync
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: