Error /proc/sys/user/max_user_namespaces needs to be set to non-zero

[hugobritobh]

EKS 1.26
Image: Jammy

I did a quick test and got the following error (folder ***) :

time="2023-05-11T12:27:57Z" level=warning msg="/proc/sys/ *** /max_ *** _namespaces needs to be set to non-zero."
error: failed to list workers: Unavailable: connection error: desc = "transport: error while dialing: dial unix /run/ *** /0/buildkit/buildkitd.sock: connect: no such file or directory"

[clemlesne]

I need more details from you:

• Your values.yaml config file
• Full logs
• Custom configuration of the Kubernetes Node, if any

Note, seems related to:

• https://github.com/moby/buildkit/blob/2951a28cd7085eb18979b1f710678623d94ed578/docs/rootless.md?plain=1#L29
• https://github.com/moby/buildkit/blob/81d19ad945cdbf921d182c50fc91169b1375b44d/examples/kubernetes/sysctl-userns.privileged.yaml#L24
• https://github.com/rootless-containers/rootlesskit/blob/7e56d0b8eb95eae84331de5af0020c6179fd5216/pkg/parent/warn.go#L51
• https://kubernetes.io/docs/concepts/workloads/pods/user-namespaces/#understanding-user-namespaces-for-stateless-pods

Possible resolution:

The issue with this configuration seems to be known for AWS Linux image, Bottlerocket.

It seems required to change the configuration of the node by setting user.max_user_namespaces configuration to a larger level.

Can you try to apply this config?

[hugobritobh]

With this config it worked fine

[clemlesne]

I added details in the doc, see: b62a83d.