Podman installation failure during XSOAR migration!!!

[Sumiya2]

The below error occurs during the XSOAR installation. Can anybody help me why this problem occurs?

"Configuring Podman...
ERRO[0000] XDG_RUNTIME_DIR directory "/run/user/0" is not owned by the current user
Failed to migrate Podman containers
exit status 1
Podman installation has failed, do you wish to continue? (default: 'yes')"

Note:

• Current server OS version is Red Hat Enterprise Linux release 8.9
• I have run the installer from root user
• Firewall rules are allowed
• OS didn't block access for the yum package manager

[eriksjolund]

The error message

ERRO[0000] XDG_RUNTIME_DIR directory "/run/user/0" is not owned by the current user

matches the error message in the troubleshooting tip

"Podman run fails with ERRO[0000] XDG_RUNTIME_DIR directory "/run/user/0" is not owned by the current user or Error: creating tmpdir: mkdir /run/user/1000: permission denied."
https://github.com/containers/podman/blob/main/troubleshooting.md#31-podman-run-fails-with-erro0000-xdg_runtime_dir-directory-runuser0-is-not-owned-by-the-current-user-or-error-creating-tmpdir-mkdir-runuser1000-permission-denied

(I don't know if the troubleshooting tip is related to the problem you are seeing)

[eriksjolund]

I did a Google search for XSOAR and found this web page
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Administrator-Guide/Install-Podman

In the instructions there is this command:

runuser -u demisto -- podman system migrate

I think when running podman commands as another user it's better to use systemd-run because systemd-run creates and starts a transient systemd service where the environment variable XDG_RUNTIME_DIR is set up correctly.

The systemd-run command would look like this:

systemd-run --machine=demisto@ --quiet --user --collect --pipe --wait podman system migrate

Demo

Showing that the environment is different when running runuser and systemd-run

1. Become root

   sudo -i
   

2. Create test user

   useradd test1
   

3. Try out runuser

   runuser -u test1 -- env | sort > /tmp/env.runuser
   

4. Try out systemd-run

   systemd-run --machine=test1@ --quiet --user --collect --pipe --wait env | sort > /tmp/env.systemd-run
   

5. Show the difference between the files

   diff -u /tmp/env.runuser /tmp/env.systemd-run
   

   Show the output with GitHub syntax highlighting:

   --- /tmp/env.runuser	2024-04-24 06:40:11.585334269 +0000
   +++ /tmp/env.systemd-run	2024-04-24 06:40:35.398480853 +0000
   @@ -1,21 +1,14 @@
   -EDITOR=/usr/bin/nano
   -HISTCONTROL=ignoredups
   -HISTSIZE=1000
   +DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1001/bus
    HOME=/var/home/test1
   -HOSTNAME=localhost
   +INVOCATION_ID=c822e2c6d924487f81db3ff02e010824
    LANG=C.UTF-8
   -LESSOPEN=||/usr/bin/lesspipe.sh %s
    LOGNAME=test1
   -LS_COLORS=rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=01;37;41:su=37;41:sg=30;43:ca=00:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.zst=01;31:*.tzst=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.wim=01;31:*.swm=01;31:*.dwm=01;31:*.esd=01;31:*.avif=01;35:*.jpg=01;35:*.jpeg=01;35:*.mjpg=01;35:*.mjpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.webp=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=01;36:*.au=01;36:*.flac=01;36:*.m4a=01;36:*.mid=01;36:*.midi=01;36:*.mka=01;36:*.mp3=01;36:*.mpc=01;36:*.ogg=01;36:*.ra=01;36:*.wav=01;36:*.oga=01;36:*.opus=01;36:*.spx=01;36:*.xspf=01;36:*~=00;90:*#=00;90:*.bak=00;90:*.crdownload=00;90:*.dpkg-dist=00;90:*.dpkg-new=00;90:*.dpkg-old=00;90:*.dpkg-tmp=00;90:*.old=00;90:*.orig=00;90:*.part=00;90:*.rej=00;90:*.rpmnew=00;90:*.rpmorig=00;90:*.rpmsave=00;90:*.swp=00;90:*.tmp=00;90:*.ucf-dist=00;90:*.ucf-new=00;90:*.ucf-old=00;90:
   -MAIL=/var/spool/mail/root
   -PATH=/root/.local/bin:/root/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin
   -PWD=/root
   +MANAGERPID=2568
   +MEMORY_PRESSURE_WATCH=/sys/fs/cgroup/user.slice/user-1001.slice/[email protected]/app.slice/run-u0.service/memory.pressure
   +MEMORY_PRESSURE_WRITE=c29tZSAyMDAwMDAgMjAwMDAwMAA=
   +PATH=/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin
    SHELL=/bin/bash
   -SHLVL=1
   -SUDO_COMMAND=/bin/bash
   -SUDO_GID=1000
   -SUDO_UID=1000
   -SUDO_USER=core
   +SYSTEMD_EXEC_PID=2586
    TERM=xterm-256color
    USER=test1
   -_=/usr/sbin/runuser
   +XDG_RUNTIME_DIR=/run/user/1001