is this a bug, or am I doing something wrong? #19990

mailinglists35 · 2023-09-14T23:14:11Z

mailinglists35
Sep 14, 2023

trying to run a rootless container with pasta network:

$ podman --log-level debug start fedora
INFO[0000] podman filtering at log level debug
DEBU[0000] Called start.PersistentPreRunE(podman --log-level debug start fedora)
DEBU[0000] Using conmon: "/usr/bin/conmon"
DEBU[0000] Initializing boltdb state at /home/user/.local/share/containers/storage/libpod/bolt_state.db
DEBU[0000] systemd-logind: Unknown object '/'.
DEBU[0000] Using graph driver overlay
DEBU[0000] Using graph root /home/user/.local/share/containers/storage
DEBU[0000] Using run root /run/user/1000/containers
DEBU[0000] Using static dir /home/user/.local/share/containers/storage/libpod
DEBU[0000] Using tmp dir /run/user/1000/libpod/tmp
DEBU[0000] Using volume path /home/user/.local/share/containers/storage/volumes
DEBU[0000] Using transient store: false
DEBU[0000] Set libpod namespace to ""
DEBU[0000] [graphdriver] trying provided driver "overlay"
DEBU[0000] overlay: ignore_chown_errors=true
DEBU[0000] Cached value indicated that overlay is supported
DEBU[0000] Cached value indicated that overlay is supported
DEBU[0000] Cached value indicated that metacopy is not being used
DEBU[0000] Cached value indicated that native-diff is usable
DEBU[0000] backingFs=extfs, projectQuotaSupported=false, useNativeDiff=true, usingMetacopy=false
DEBU[0000] Initializing event backend journald
DEBU[0000] Configured OCI runtime crun-wasm initialization failed: no valid executable found for OCI runtime crun-wasm: invalid argument
DEBU[0000] Configured OCI runtime runc initialization failed: no valid executable found for OCI runtime runc: invalid argument
DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument
DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument
DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument
DEBU[0000] Configured OCI runtime ocijail initialization failed: no valid executable found for OCI runtime ocijail: invalid argument
DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument
DEBU[0000] Configured OCI runtime youki initialization failed: no valid executable found for OCI runtime youki: invalid argument
DEBU[0000] Using OCI runtime "/usr/bin/crun"
INFO[0000] Setting parallel job count to 13
DEBU[0000] Cached value indicated that idmapped mounts for overlay are not supported
DEBU[0000] Check for idmapped mounts support
DEBU[0000] Made network namespace at /run/user/1000/netns/netns-77cd67ba-ab6e-d308-74f9-715232e9cc47 for container 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228
DEBU[0000] overlay: mount_data=lowerdir=/home/user/.local/share/containers/storage/overlay/l/UAWD5IP6EZKGCRCRHMHW6W2QDM:/home/user/.local/share/containers/storage/overlay/l/VTQBJNEKFVASIFENF55RZKTGAV:/home/user/.local/share/containers/storage/overlay/l/JEPYVKH264Y6B4IFC647QMHXV3,upperdir=/home/user/.local/share/containers/storage/overlay/1a9875ac980c3dbdcfda59dd7f9e5d848045d8d0ddfb3866ad506bee71be05d7/diff,workdir=/home/user/.local/share/containers/storage/overlay/1a9875ac980c3dbdcfda59dd7f9e5d848045d8d0ddfb3866ad506bee71be05d7/work,,userxattr,context="system_u:object_r:container_file_t:s0:c798,c997"
DEBU[0000] pasta arguments: --config-net -t auto -u auto -T auto -U auto --no-map-gw --netns /run/user/1000/netns/netns-77cd67ba-ab6e-d308-74f9-715232e9cc47
DEBU[0000] Mounted container "85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228" at "/home/user/.local/share/containers/storage/overlay/1a9875ac980c3dbdcfda59dd7f9e5d848045d8d0ddfb3866ad506bee71be05d7/merged"
DEBU[0000] Created root filesystem for container 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228 at /home/user/.local/share/containers/storage/overlay/1a9875ac980c3dbdcfda59dd7f9e5d848045d8d0ddfb3866ad506bee71be05d7/merged
DEBU[0000] /etc/system-fips does not exist on host, not mounting FIPS mode subscription
DEBU[0000] Setting Cgroups for container 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228 to user.slice:libpod:85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228
DEBU[0000] reading hooks from /usr/share/containers/oci/hooks.d
DEBU[0000] Workdir "/" resolved to host path "/home/user/.local/share/containers/storage/overlay/1a9875ac980c3dbdcfda59dd7f9e5d848045d8d0ddfb3866ad506bee71be05d7/merged"
DEBU[0000] Created OCI spec for container 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228 at /home/user/.local/share/containers/storage/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/config.json
DEBU[0000] /usr/bin/conmon messages will be logged to syslog
DEBU[0000] running conmon: /usr/bin/conmon               args="[--api-version 1 -c 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228 -u 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228 -r /usr/bin/crun -b /home/user/.local/share/containers/storage/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata -p /run/user/1000/containers/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/pidfile -n fedora --exit-dir /run/user/1000/libpod/tmp/exits --full-attach -s -l journald --log-level debug --syslog -t --conmon-pidfile /run/user/1000/containers/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/conmon.pid --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /home/user/.local/share/containers/storage --exit-command-arg --runroot --exit-command-arg /run/user/1000/containers --exit-command-arg --log-level --exit-command-arg debug --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /run/user/1000/libpod/tmp --exit-command-arg --network-config-dir --exit-command-arg  --exit-command-arg --network-backend --exit-command-arg netavark --exit-command-arg --volumepath --exit-command-arg /home/user/.local/share/containers/storage/volumes --exit-command-arg --transient-store=false --exit-command-arg --runtime --exit-command-arg crun --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.ignore_chown_errors=true --exit-command-arg --events-backend --exit-command-arg journald --exit-command-arg --syslog --exit-command-arg container --exit-command-arg cleanup --exit-command-arg 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228]"
INFO[0000] Running conmon under slice user.slice and unitName libpod-conmon-85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228.scope
INFO[0000] Failed to add conmon to systemd sandbox cgroup: Unit libpod-conmon-85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228.scope was already loaded or has a fragment file.
DEBU[0000] Received: -1
DEBU[0000] Cleaning up container 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228
DEBU[0000] Tearing down network namespace at /run/user/1000/netns/netns-77cd67ba-ab6e-d308-74f9-715232e9cc47 for container 85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228
DEBU[0000] Unmounted container "85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228"
Error: OCI runtime error: unable to start container "85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228": crun: error creating systemd unit `libpod-85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228.scope`: got `failed`
DEBU[0000] Shutting down engines

$ podman inspect fedora
[
     {
          "Id": "85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228",
          "Created": "2023-09-15T01:56:42.990094734+03:00",
          "Path": "/usr/sbin/init",
          "Args": [
               "/usr/sbin/init"
          ],
          "State": {
               "OciVersion": "1.1.0-rc.1",
               "Status": "created",
               "Running": false,
               "Paused": false,
               "Restarting": false,
               "OOMKilled": false,
               "Dead": false,
               "Pid": 0,
               "ExitCode": 0,
               "Error": "crun: error creating systemd unit `libpod-85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228.scope`: got `failed`: OCI runtime error",
               "StartedAt": "0001-01-01T00:00:00Z",
               "FinishedAt": "0001-01-01T00:00:00Z",
               "Health": {
                    "Status": "",
                    "FailingStreak": 0,
                    "Log": null
               },
               "CheckpointedAt": "0001-01-01T00:00:00Z",
               "RestoredAt": "0001-01-01T00:00:00Z"
          },
          "Image": "adad2d03c9df0ccbbbabb7a569d1e22148a09d9316353401c9c9585fe81645f4",
          "ImageDigest": "sha256:b11cfbb60152cbd026cab6e540f976eef8dc1417b2c501531f7ad3da41bda9e4",
          "ImageName": "localhost/fedora-qemu-macos:latest",
          "Rootfs": "",
          "Pod": "",
          "ResolvConfPath": "/run/user/1000/containers/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/resolv.conf",
          "HostnamePath": "/run/user/1000/containers/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/hostname",
          "HostsPath": "/run/user/1000/containers/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/hosts",
          "StaticDir": "/home/user/.local/share/containers/storage/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata",
          "OCIConfigPath": "/home/user/.local/share/containers/storage/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/config.json",
          "OCIRuntime": "crun",
          "ConmonPidFile": "/run/user/1000/containers/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/conmon.pid",
          "PidFile": "/run/user/1000/containers/overlay-containers/85cda02df5af3c5990654066ed6ae767e12a8cf4c6f88cebe2086b5ba0037228/userdata/pidfile",
          "Name": "fedora",
          "RestartCount": 0,
          "Driver": "overlay",
          "MountLabel": "system_u:object_r:container_file_t:s0:c798,c997",
          "ProcessLabel": "system_u:system_r:container_init_t:s0:c798,c997",
          "AppArmorProfile": "",
          "EffectiveCaps": [
               "CAP_CHOWN",
               "CAP_DAC_OVERRIDE",
               "CAP_FOWNER",
               "CAP_FSETID",
               "CAP_KILL",
               "CAP_NET_BIND_SERVICE",
               "CAP_SETFCAP",
               "CAP_SETGID",
               "CAP_SETPCAP",
               "CAP_SETUID",
               "CAP_SYS_CHROOT"
          ],
          "BoundingCaps": [
               "CAP_CHOWN",
               "CAP_DAC_OVERRIDE",
               "CAP_FOWNER",
               "CAP_FSETID",
               "CAP_KILL",
               "CAP_NET_BIND_SERVICE",
               "CAP_SETFCAP",
               "CAP_SETGID",
               "CAP_SETPCAP",
               "CAP_SETUID",
               "CAP_SYS_CHROOT"
          ],
          "ExecIDs": [],
          "GraphDriver": {
               "Name": "overlay",
               "Data": {
                    "LowerDir": "/home/user/.local/share/containers/storage/overlay/a874e8e866aef0236ba552f0e04a26d89c34d9567ef6e351e804fd0752671401/diff:/home/user/.local/share/containers/storage/overlay/1fab156ac84b443323cea7abde0010e6fec221ba2c5cfde9c5ad4756f8bf33ff/diff:/home/user/.local/share/containers/storage/overlay/dda8af7b00b7fe3b1c22f7b09aace1a2d0a32018905f3beaaa53f45ad97a3646/diff",
                    "UpperDir": "/home/user/.local/share/containers/storage/overlay/1a9875ac980c3dbdcfda59dd7f9e5d848045d8d0ddfb3866ad506bee71be05d7/diff",
                    "WorkDir": "/home/user/.local/share/containers/storage/overlay/1a9875ac980c3dbdcfda59dd7f9e5d848045d8d0ddfb3866ad506bee71be05d7/work"
               }
          },
          "Mounts": [],
          "Dependencies": [],
          "NetworkSettings": {
               "EndpointID": "",
               "Gateway": "",
               "IPAddress": "",
               "IPPrefixLen": 0,
               "IPv6Gateway": "",
               "GlobalIPv6Address": "",
               "GlobalIPv6PrefixLen": 0,
               "MacAddress": "",
               "Bridge": "",
               "SandboxID": "",
               "HairpinMode": false,
               "LinkLocalIPv6Address": "",
               "LinkLocalIPv6PrefixLen": 0,
               "Ports": {},
               "SandboxKey": ""
          },
          "Namespace": "",
          "IsInfra": false,
          "IsService": false,
          "Config": {
               "Hostname": "85cda02df5af",
               "Domainname": "",
               "User": "",
               "AttachStdin": false,
               "AttachStdout": false,
               "AttachStderr": false,
               "Tty": true,
               "OpenStdin": false,
               "StdinOnce": false,
               "Env": [
                    "TERM=xterm",
                    "container=oci",
                    "DISTTAG=f38container",
                    "FGC=f38",
                    "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
                    "HOME=/root",
                    "container_uuid=85cda02df5af3c5990654066ed6ae767",
                    "HOSTNAME=85cda02df5af"
               ],
               "Cmd": [
                    "/usr/sbin/init"
               ],
               "Image": "localhost/fedora-qemu-macos:latest",
               "Volumes": null,
               "WorkingDir": "/",
               "Entrypoint": "",
               "OnBuild": null,
               "Labels": {
                    "io.buildah.version": "1.29.0",
                    "license": "MIT",
                    "name": "fedora",
                    "vendor": "Fedora Project",
                    "version": "38"
               },
               "Annotations": {
                    "io.container.manager": "libpod",
                    "org.opencontainers.image.base.digest": "sha256:6342c05d2363b6b62770b3cc2a91ee078c97397b6ab79c30d8731855b7742391",
                    "org.opencontainers.image.base.name": "registry.fedoraproject.org/fedora:latest",
                    "org.opencontainers.image.stopSignal": "37"
               },
               "StopSignal": 37,
               "HealthcheckOnFailureAction": "none",
               "CreateCommand": [
                    "podman",
                    "run",
                    "-dt",
                    "--name=fedora",
                    "--net",
                    "pasta:-t,auto,-u,auto,-T,auto,-U,auto",
                    "localhost/fedora-qemu-macos"
               ],
               "SystemdMode": true,
               "Umask": "0022",
               "Timeout": 0,
               "StopTimeout": 10,
               "Passwd": true,
               "sdNotifyMode": "container"
          },
          "HostConfig": {
               "Binds": [],
               "CgroupManager": "systemd",
               "CgroupMode": "private",
               "ContainerIDFile": "",
               "LogConfig": {
                    "Type": "journald",
                    "Config": null,
                    "Path": "",
                    "Tag": "",
                    "Size": "0B"
               },
               "NetworkMode": "pasta",
               "PortBindings": {},
               "RestartPolicy": {
                    "Name": "",
                    "MaximumRetryCount": 0
               },
               "AutoRemove": false,
               "VolumeDriver": "",
               "VolumesFrom": null,
               "CapAdd": [],
               "CapDrop": [],
               "Dns": [],
               "DnsOptions": [],
               "DnsSearch": [],
               "ExtraHosts": [],
               "GroupAdd": [],
               "IpcMode": "shareable",
               "Cgroup": "",
               "Cgroups": "default",
               "Links": null,
               "OomScoreAdj": 0,
               "PidMode": "private",
               "Privileged": false,
               "PublishAllPorts": false,
               "ReadonlyRootfs": false,
               "SecurityOpt": [],
               "Tmpfs": {},
               "UTSMode": "private",
               "UsernsMode": "",
               "ShmSize": 65536000,
               "Runtime": "oci",
               "ConsoleSize": [
                    0,
                    0
               ],
               "Isolation": "",
               "CpuShares": 0,
               "Memory": 0,
               "NanoCpus": 0,
               "CgroupParent": "user.slice",
               "BlkioWeight": 0,
               "BlkioWeightDevice": null,
               "BlkioDeviceReadBps": null,
               "BlkioDeviceWriteBps": null,
               "BlkioDeviceReadIOps": null,
               "BlkioDeviceWriteIOps": null,
               "CpuPeriod": 0,
               "CpuQuota": 0,
               "CpuRealtimePeriod": 0,
               "CpuRealtimeRuntime": 0,
               "CpusetCpus": "",
               "CpusetMems": "",
               "Devices": [],
               "DiskQuota": 0,
               "KernelMemory": 0,
               "MemoryReservation": 0,
               "MemorySwap": 0,
               "MemorySwappiness": 0,
               "OomKillDisable": false,
               "PidsLimit": 2048,
               "Ulimits": [],
               "CpuCount": 0,
               "CpuPercent": 0,
               "IOMaximumIOps": 0,
               "IOMaximumBandwidth": 0,
               "CgroupConf": null
          }
     }
]

$ podman info
host:
  arch: amd64
  buildahVersion: 1.29.0
  cgroupControllers:
  - memory
  - pids
  cgroupManager: systemd
  cgroupVersion: v2
  conmon:
    package: conmon-2.1.7-1.el9_2.x86_64
    path: /usr/bin/conmon
    version: 'conmon version 2.1.7, commit: ee2f8dd0a09933610c92940874094961cd55a4bf'
  cpuUtilization:
    idlePercent: 86.77
    systemPercent: 4.81
    userPercent: 8.43
  cpus: 4
  distribution:
    distribution: '"ol"'
    variant: server
    version: "9.2"
  eventLogger: journald
  hostname: gen8.domain.tld
  idMappings:
    gidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 100000
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 1000
      size: 1
    - container_id: 1
      host_id: 100000
      size: 65536
  kernel: 5.15.0-102.110.5.1.el9uek.x86_64
  linkmode: dynamic
  logDriver: journald
  memFree: 1725272064
  memTotal: 16698793984
  networkBackend: netavark
  ociRuntime:
    name: crun
    package: crun-1.8.4-1.el9_2.x86_64
    path: /usr/bin/crun
    version: |-
      crun version 1.8.4
      commit: 5a8fa99a5e41facba2eda4af12fa26313918805b
      rundir: /run/user/1000/crun
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL
  os: linux
  remoteSocket:
    path: /run/user/1000/podman/podman.sock
  security:
    apparmorEnabled: false
    capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
    rootless: true
    seccompEnabled: true
    seccompProfilePath: /usr/share/containers/seccomp.json
    selinuxEnabled: true
  serviceIsRemote: false
  slirp4netns:
    executable: /usr/bin/slirp4netns
    package: slirp4netns-1.2.0-3.el9.x86_64
    version: |-
      slirp4netns version 1.2.0
      commit: 656041d45cfca7a4176f6b7eed9e4fe6c11e8383
      libslirp: 4.4.0
      SLIRP_CONFIG_VERSION_MAX: 3
      libseccomp: 2.5.2
  swapFree: 42948608000
  swapTotal: 42949664768
  uptime: 1966h 1m 26.00s (Approximately 81.92 days)
plugins:
  authorization: null
  log:
  - k8s-file
  - none
  - passthrough
  - journald
  network:
  - bridge
  - macvlan
  volume:
  - local
registries:
  search:
  - container-registry.oracle.com
  - docker.io
store:
  configFile: /home/user/.config/containers/storage.conf
  containerStore:
    number: 2
    paused: 0
    running: 0
    stopped: 2
  graphDriverName: overlay
  graphOptions:
    overlay.ignore_chown_errors: "true"
  graphRoot: /home/user/.local/share/containers/storage
  graphRootAllocated: 134145380352
  graphRootUsed: 29439934464
  graphStatus:
    Backing Filesystem: extfs
    Native Overlay Diff: "true"
    Supports d_type: "true"
    Using metacopy: "false"
  imageCopyTmpDir: /var/tmp
  imageStore:
    number: 4
  runRoot: /run/user/1000/containers
  transientStore: false
  volumePath: /home/user/.local/share/containers/storage/volumes
version:
  APIVersion: 4.4.1
  Built: 1683878118
  BuiltTime: Fri May 12 10:55:18 2023
  GitCommit: ""
  GoVersion: go1.19.6
  Os: linux
  OsArch: linux/amd64
  Version: 4.4.1

$ grep . /etc/sub?id
/etc/subgid:user:100000:65536
/etc/subuid:user:100000:65536

mailinglists35 · 2023-09-14T23:16:45Z

mailinglists35
Sep 14, 2023
Author

using available distro package passt version 0^20230222.g4ddbcb9-4.el9_2

0 replies

ppenguin · 2023-10-12T13:16:52Z

ppenguin
Oct 12, 2023

Did you solve this? I'm trying this and get a similar issue, where somehow newuidmap fails due to lack of permissions (running in a systemd DynamicUser environment).

5 replies

rhatdan Oct 12, 2023
Maintainer

newuidmap and newgidmap will not work with DynamicUser since there is no way currently to handle /etc/subuid and /etc/subgid files.

ppenguin Oct 12, 2023

So even if my DynamicUser is named (User and Group are set) and these names appear in /etc/sub?id this is somehow filtered out? I suppose by systemd? Without a way to override this?

rhatdan Oct 13, 2023
Maintainer

You should ask systemd, I don't know.

ppenguin Oct 13, 2023

@rhatdan Thanks!

I've now actually gotten past most permission errors by using AmbientCapabilities=CAP_SETUID CAP_SETGID CAP_SETFCAP, RestrictSUIDSGID=no and using dbus-launch in ExecStart to start podman (not sure yet which ones are the minimum necessary), but I now get

Error: copying system image from manifest list: writing blob: adding layer with blob "sha256:a378f10b321842c3042cdeff4f6997f34f4cb21f2eff27704b7f6193ab7b5fea": processing tar file(open /usr/bin/chage: operation not permitted): exit status 1

This must be something podman does? But I've never even heard of chage (and since I'm on NixOS it's certain to not exist in /usr/bin), but I did take care to include the shadow package so chage is in the PATH for ExecStart.

Could that mean that the error message is wrong and actually means chage not found and should be looked up in the PATH? Or depending on what its purpose is only run under certain circumstances?

rhatdan Oct 13, 2023
Maintainer

Looks like chage is part of the content of the image and is being opened and failing. Podman does not do anything with the chage command.

The chage command changes the number of days between password changes and the date of the last password change. This information is used by the system to determine when a user must change their password.```

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

is this a bug, or am I doing something wrong? #19990

Uh oh!

{{title}}

Uh oh!

Replies: 2 comments 5 replies

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

is this a bug, or am I doing something wrong? #19990

Uh oh!

mailinglists35 Sep 14, 2023

Replies: 2 comments · 5 replies

Uh oh!

mailinglists35 Sep 14, 2023 Author

Uh oh!

ppenguin Oct 12, 2023

Uh oh!

rhatdan Oct 12, 2023 Maintainer

Uh oh!

ppenguin Oct 12, 2023

Uh oh!

rhatdan Oct 13, 2023 Maintainer

Uh oh!

ppenguin Oct 13, 2023

Uh oh!

rhatdan Oct 13, 2023 Maintainer

mailinglists35
Sep 14, 2023

Replies: 2 comments 5 replies

mailinglists35
Sep 14, 2023
Author

ppenguin
Oct 12, 2023

rhatdan Oct 12, 2023
Maintainer

rhatdan Oct 13, 2023
Maintainer

rhatdan Oct 13, 2023
Maintainer