Skip to content
This repository has been archived by the owner on Feb 24, 2020. It is now read-only.

Sandbox apps fail to run if data-dir is on a non-shared mountpoint #3940

Open
euank opened this issue Jun 18, 2018 · 0 comments
Open

Sandbox apps fail to run if data-dir is on a non-shared mountpoint #3940

euank opened this issue Jun 18, 2018 · 0 comments

Comments

@euank
Copy link
Member

euank commented Jun 18, 2018

Environment

rkt master on semaphore, any other environment with "/" not mounted shared.

$ cat /etc/os-release
NAME="Ubuntu"
VERSION="14.04.5 LTS, Trusty Tahr"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 14.04.5 LTS"
VERSION_ID="14.04"
HOME_URL="http://www.ubuntu.com/"
SUPPORT_URL="http://help.ubuntu.com/"
BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"

$ systemctl --version
systemctl: command not found

What did you do?

# terminal 1
$ sudo RKT_EXPERIMENT_APP=true rkt app sandbox --debug

# terminal 2
$ sudo rkt image fetch --insecure-options=image docker://busybox
$ sudo RKT_EXPERIMENT_APP=true rkt app add $uuid docker://busybox --name=test
$ sudo RKT_EXPERIMENT_APP=true rkt app start --app test

What did you expect to see?

"/bin/sh" should run and then exit.

What did you see instead?

The sandbox terminal prints Error: Unable to open "/bin/sh": No such file or directory

Possible Solutions

There's two main paths we can go down to improve this:

  1. Explicitly denounce support for non-shared locations for the datadir
  2. Remount the datadirectory as shared to avoid this

If we go with 1. then the resolution of this issue would be detecting and giving a useful error in that scenario.

Note that docker goes with 2 these days, their code is here.

euank added a commit to euank/rkt that referenced this issue Jun 18, 2018
See rkt#3940 for why / needs to be shared. Specifically, the test
TestAppSandboxAddStartRemove failed on sempahore without this change.

The test did work in the past, but that's because sempahore used to run
an old version of docker which remounted / as shared for us.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant