Nested resharing of socket

[alexpdp7]

Hi,

I discovered that I can use podman system service --time=0 unix:///tmp/podman.sock to transiently expose a socket for programs that expect a Docker socket to use containers.

I have been trying to use Pack using this trick:

$ podman run -it --rm --security-opt label=disable -v /tmp/podman.sock:/var/run/docker.sock -v /tmp -v $PWD:/workspace -e HOME=/workspace -w /workspace docker.io/buildpacksio/pack:latest build blog -B heroku/builder:22 -v

, but it seems there's a problem reexporting the socket inside the Pack container?

...
Running the creator on OS linux with:
Container Settings:
  Args: /cnb/lifecycle/creator -daemon -launch-cache /launch-cache -log-level debug -app /workspace -cache-dir /cache -run-image heroku/heroku:22-cnb blog
  System Envs: CNB_PLATFORM_API=0.12
  Image: pack.local/builder/696f7269756f66717a76:latest
  User: root
  Labels: map[author:pack]
Host Settings:
  Binds: pack-cache-library_blog_latest-7a6f539a4561.build:/cache /var/run/docker.sock:/var/run/docker.sock pack-cache-library_blog_latest-7a6f539a4561.launch:/launch-cache pack-layers-yahkvkkvcg:/layers pack-app-jtmvcoavgd:/workspace
  Network Mode: 
ERROR: failed to build: executing lifecycle: failed to create 'creator' container: Error response from daemon: container create: statfs /var/run/docker.sock: permission denied

Any ideas to troubleshoot this?

[alexpdp7]

Never mind, there are alternative ways of doing this.