Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add troubleshooting advice about the --userns option. [CI:DOCS] #9770

Closed
wants to merge 1 commit into from
Closed

Add troubleshooting advice about the --userns option. [CI:DOCS] #9770

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
3 changes: 2 additions & 1 deletion .github/ISSUE_TEMPLATE.md
View file
Open in desktop
Expand Up @@ -67,7 +67,8 @@ Briefly describe the problem you are having in a few paragraphs.
(paste your output here)
```

**Have you tested with the latest version of Podman and have you checked the Podman Troubleshooting Guide?**
**Have you tested with the latest version of Podman and have you checked the Podman Troubleshooting Guide? (https://github.com/containers/podman/blob/master/troubleshooting.md)**

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nice change, I hadn't thought to add a link like this in a template....


Yes/No

Expand Down
10 changes: 9 additions & 1 deletion troubleshooting.md
View file
Open in desktop
Expand Up @@ -23,7 +23,7 @@ touch: cannot touch '/content/file': Permission denied

#### Solution

This is usually caused by SELinux.
This is sometimes caused by SELinux, and sometimes by user namespaces.

Labeling systems like SELinux require that proper labels are placed on volume
content mounted into a container. Without a label, the security system might
Expand All @@ -47,6 +47,14 @@ will disable SELinux separation for the container.

$ podman run --security-opt label=disable -v ~:/home/user fedora touch /home/user/file

In cases where the container image runs as a specific, non-root user, though, the
solution is to fix the user namespace. This would include container images such as
the Jupyter Notebook image (which runs as "jovyan") and the Postgres image (which runs
as "postgres"). In either case, use the `--userns` switch to map user namespaces,
most of the time by using keep_id option.

$ podman run -v "$PWD":/home/jovyan/work --userns=keep_id jupyter/scipy-notebook

---
### 3) No such image or Bare keys cannot contain ':'

Expand Down