Replies: 3 comments 7 replies
-
|
Hey @rhatdan I'm also hitting this, also by changing the storage path for rootless. Note I'm using podman remote over a UNIX socket, in case it matters (don't think it does). |
Beta Was this translation helpful? Give feedback.
-
|
Looks like container-selinux is failing to be installed? Is this on RHEL9? |
Beta Was this translation helpful? Give feedback.
-
|
RHEL 8.6. |
Beta Was this translation helpful? Give feedback.
-
|
yum -y update selinux-policy libsepol See if either fail |
Beta Was this translation helpful? Give feedback.
-
|
They worked fine, both update and reinstall commands. Shouldn't the above commands set the same contexts for my custo storage path aap/controller/data/containers/storage ? |
Beta Was this translation helpful? Give feedback.
-
|
Equivalencies can not be done with relative paths. $ sudo semanage fcontext -a -e $HOME/ .local/share/containers $HOME/aap/controller/data/containers |
Beta Was this translation helpful? Give feedback.
-
|
That fixed it! Thx! |
Beta Was this translation helpful? Give feedback.
-
|
@rhatdan I'm having a issue with building a container image. contents of the docker file are below # Build stage
FROM golang:1.24-alpine AS builder
WORKDIR /app
# Set GOPRIVATE for private modules
ENV GOPRIVATE=github.com/my-company
# Configure git credentials for private repos
ARG GITHUB_USERNAME
ARG GITHUB_TOKEN
# Create .netrc file for authentication
RUN echo "machine github.com login ${GITHUB_USERNAME} password ${GITHUB_TOKEN}" > ~/.netrc && \
chmod 600 ~/.netrc
# Copy only the go.mod and go.sum files first for better layer caching
COPY go.mod go.sum ./
RUN go mod download
# Now copy the source code
COPY . .
# Build the application
RUN go build -o /app/template ./cmd/server/main.go
# Runtime stage
FROM alpine:3.21
WORKDIR /app
# Create a non-root user
RUN addgroup -S appgroup && adduser -S appuser -G appgroup
USER appuser
# Copy only the binary from the build stage
COPY --from=builder /app/template .
COPY --from=builder /app/etc/config.local.env ./etc/config.local.env
# Configure environment variables
ARG IS_PROD_ENV
RUN echo "TEMPLATE_MS_IS_PROD_ENV=${IS_PROD_ENV}" >> ./etc/config.local.env
EXPOSE 50002
# Run the binary directly in production
CMD ["./template"]the error while build is below STEP 6/13: RUN echo "machine github.com login ${GITHUB_USERNAME} password ${GITHUB_TOKEN}" > ~/.netrc && \
chmod 600 ~/.netrc
/bin/sh: error while loading shared libraries: /lib/x86_64-linux-gnu/libc.so.6: cannot apply additional memory protection after relocation: Permission denied
Error: building at STEP "RUN echo "machine github.com login ${GITHUB_USERNAME} password ${GITHUB_TOKEN}" > ~/.netrc && \
chmod 600 ~/.netrc": while running runtime: exit status 127
Build failed with exit code 127 Below are my labels for harshit@fedora:~$ ls -LZ ~/.local/share/containers
unconfined_u:object_r:data_home_t:s0 podman
unconfined_u:object_r:data_home_t:s0 podman-desktop
unconfined_u:object_r:data_home_t:s0 storageTried SolutionsI've already tired, nothing works
Solution that workedThough when I did I again changed the enforcing rule with Can you please explain me the issue and a proper solution. 🙏 |
Beta Was this translation helpful? Give feedback.
-
|
Sorry for assuming it was working, actually now it fails at a different build step. The build logs are below [1/1] Building template
[1/2] STEP 1/10: FROM golang:1.24-alpine AS builder
[1/2] STEP 2/10: WORKDIR /app
--> Using cache 2772244af7da78783fcf34e97ae9020041ef0ca47bf77a07c956da85f8db6761
--> 2772244af7da
[1/2] STEP 3/10: ENV GOPRIVATE=github.com/my-company
--> Using cache 106a03deb85a819512f620e1aecc077ffcf88a5821c14518fc9cff24c86a6b89
--> 106a03deb85a
[1/2] STEP 4/10: ARG GITHUB_USERNAME
--> Using cache 15db3c50ff739b9ce6b1bc73c16b9269f525b5887db826b539ca076cb9161169
--> 15db3c50ff73
[1/2] STEP 5/10: ARG GITHUB_TOKEN
--> Using cache 5bef622cc4b97afbfb0ebee8d24948a3c9af75b26be0bad34a607fe922c3c9c8
--> 5bef622cc4b9
[1/2] STEP 6/10: RUN echo "machine github.com login ${GITHUB_USERNAME} password ${GITHUB_TOKEN}" > ~/.netrc && chmod 600 ~/.netrc
--> Using cache bb024fac9accc939836c2b373e74c77f4aa12810fd662557336c40f8cc633aeb
--> bb024fac9acc
[1/2] STEP 7/10: COPY go.mod go.sum ./
--> Using cache 1d3146dab46d1bbb5e7deace1c98e344a06b2251110863c1755bedcf2abfa03e
--> 1d3146dab46d
[1/2] STEP 8/10: RUN go mod download
Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed: No error information
Error relocating /bin/sh: RELRO protection failed: No error information
Error: building at STEP "RUN go mod download": while running runtime: exit status 127
Build failed with exit code 127 |
Beta Was this translation helpful? Give feedback.
-
|
Need AVCs. |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Following on from this:
Apologies. I assumed since I had the exact same error as the issue and couldn't find a working fix in the issue that it was not actually completely fixed.
Anyway here are my
~/.local/share/containerslabels:Honestly even if they are misconfigured, this seems like common enough issue that Podman should check for it (assuming that is possible). I think the number of people using Podman who know what a "label" is is probably close to 0%.
If it's slow to check every time you could have a
podman doctortool that checks configuration. Dart/Flutter has that and it's actually awesome.Beta Was this translation helpful? Give feedback.
All reactions