| kata-irc-bot | <gmaglion> Yes, is what we recommend. | 09:28 |
|---|---|---|
| kata-irc-bot | <gmaglion> Also, it's worth testing `--inode-file-handles` (specially if you share nfs) | 09:30 |
| kata-irc-bot | <yonghe.zhao> Hi team, I was trying to run `kind create cluster` or `minikube start` in kata container. But I met the same error for both cases: ```17:35:47 ! StartHost failed, but will try again: creating host: create: creating: create kic node: create container: docker run -d -t --privileged --device /dev/fuse --security-opt seccomp=unconfined --tmpfs /tmp --tmpfs /run -v /lib/modules:/lib/modules:ro --hostname minikube --name minikube --lab | 15:35 |
| kata-irc-bot | created_by.minikube.sigs.k8s.io=true --label name.minikube.sigs.k8s.io=minikube --label role.minikube.sigs.k8s.io= --label mode.minikube.sigs.k8s.io=minikube --network minikube --ip 192.168.49.2 --volume minikube:/var --security-opt apparmor=unconfined --cpus=2 -e container=docker --expose 8443 --volume=/sd/tokens:/tmp/.athenz --publish=127.0.0.1::8443 --publish=127.0.0.1::22 --publish=127.0.0.1::2376 --publish=127.0.0.1::5000 | 15:35 |
| kata-irc-bot | --publish=127.0.0.1::32443 gcr.io/k8s-minikube/kicbase:v0.0.28@sha256:4780f1897569d2bf77aafb3d133a08d42b4fe61127f06fcfc90c2c5d902d893c: exit status 125 17:35:47 stdout: 17:35:47 3a87b26e1ab3580f271de8d60f61d881b7c10e492a5ae3ed67f231705f1a44be 17:35:47 17:35:47 stderr: 17:35:47 docker: Error response from daemon: OCI runtime create failed: container_linux.go:349: starting container process caused "apply caps: operation not permitted": unknown | 15:35 |
| kata-irc-bot | Any hint on why and how to solve it? Thank you very much! :grinning: | 15:35 |
| kata-irc-bot | <fidencio> Are you hitting this when creating a kata-container? | 15:49 |
| kata-irc-bot | <yonghe.zhao> No. I was trying to run `kind create cluster` or `minikube start` insode kata container. | 18:17 |
| kata-irc-bot | <yonghe.zhao> kata-container was already up. | 18:18 |
| kata-irc-bot | <eric.ernst> Are you running privileged? | 18:20 |
| kata-irc-bot | <eric.ernst> Seems to be a permissions issue? In minikube, I am assuming that you’re running the CRI directly inside the pod, not utilizing anything from the host, is that correct? | 18:20 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!