Issue Deion Hello, I'm on Debian 12 and us

Hello, I have the following versions: <div class="highlight high

Seems like this has already been reported there: <a class="issue-link js-issue-link" d

And here too: <a href="https://archives.passt.top/passt-user/8cf17fe5-ae9f-4228-8970-a

Fixed in my ansible role with: <div class="highlight highlight-source-yaml notrans

pasta: "Couldn't open network namespace /run/user/1001/netns/netns-a7f183ff-5cf7-a9ab-304f-23d76da9450a: Permission denied" about podman HOT 6 CLOSED

pulsar895 commented on June 28, 2024

pasta: "Couldn't open network namespace /run/user/1001/netns/netns-a7f183ff-5cf7-a9ab-304f-23d76da9450a: Permission denied"

from podman.

Comments (6)

Luap99 commented on June 28, 2024

Did this work with a previous version of pasta?

from podman.

Luap99 commented on June 28, 2024

[ 214.033148] audit: type=1400 audit(1717774894.345:18): apparmor="DENIED" operation="open" profile="passt" name="/run/user/1001/netns/netns-ee1afd7a-c406-0b45-7e3e-9283cb35e0b1" pid=929 comm="pasta" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0

profile="passt" looks wrong. There is a separate pasta profile that must be used for pasta, compare containers/buildah#5440 (comment)

So this very much looks like a packing issue, thus closing.

from podman.

pulsar895 commented on June 28, 2024

Hello,

I have the following versions:

$ sudo apt policy passt
[sudo] password for pulsar: 
passt:
  Installed: 100:0.0+20240523.765eb0bf-1
  Candidate: 100:0.0+20240523.765eb0bf-1
  Version table:
 *** 100:0.0+20240523.765eb0bf-1 500
        500 http://downloadcontent.opensuse.org/repositories/home:/alvistack/Debian_12  Packages
        100 /var/lib/dpkg/status
     100:0.0+20240510.72884484-1 500
        500 http://downloadcontent.opensuse.org/repositories/home:/alvistack/Debian_12  Packages
     100:0.0+20240426.d03c4e20-1 500
        500 http://downloadcontent.opensuse.org/repositories/home:/alvistack/Debian_12  Packages
     0.0~git20230309.7c7625d-1 500
        500 https://deb.debian.org/debian bookworm/main amd64 Packages

I test here with each version:

$ sudo apt install passt=100:0.0+20240510.72884484-1
$ podman run -ti docker.io/library/alpine /bin/sh
Error: pasta failed with exit code 1:
Couldn't open network namespace /run/user/1001/netns/netns-abc483ef-874f-81c8-1d12-85f8272a18b5: Permission denied

$ sudo apt install passt=100:0.0+20240426.d03c4e20-1
$ podman run -ti docker.io/library/alpine /bin/sh
Error: pasta failed with exit code 1:
Couldn't open network namespace /run/user/1001/netns/netns-abc483ef-874f-81c8-1d12-85f8272a18b5: Permission denied

$ sudo apt install passt=0.0~git20230309.7c7625d-1
$ podman run -ti docker.io/library/alpine /bin/sh
/ #

I hadn't tested it with the distribution version... It seems to work. I'll test it with a quadlet.

from podman.

Luap99 commented on June 28, 2024

Seems like this has already been reported there: alvistack/passt-top-passt#1

from podman.

sbrivio-rh commented on June 28, 2024

And here too: https://archives.passt.top/passt-user/[email protected]/.

from podman.

pulsar895 commented on June 28, 2024

Fixed in my ansible role with:

- name: Fix passt/pasta
  ansible.builtin.file:
    state: hard
    force: true
    src: /usr/bin/passt
    dest: /usr/bin/pasta
  when: podman_fix_pasta
  become: true