unshare(CLONE_NEWPID): Operation not permitted in install script about sandstorm HOT 5 CLOSED

That's very strange. Since it proposed installing a service hook, I assume you chose to grant root privileges. So why would unshare() be disallowed?

Is Ubuntu running on bare metal, or in a VM, or in Docker, or...?

from sandstorm.

The server I wanted to use is in fact advertized as vserver (virtual server). I never really noticed any difference to a dedicated server other than performance until now but I guess this virtualization part (hoewever my provider implemented that) is the problem.

I guess there is no real workaround here for me other than switching my server?

from sandstorm.

Ah, assuming "vserver" refers to Linux-VServer, then that probably explains the problem. This behaves a lot like a Docker container. Inside the container, when you are "root", you aren't really root, and some things root can normally do won't work.

One thing you can try instead is installing and running Sandstorm as a non-root user (say "no" for the first question in the installer). In this case it takes a different path based on UID namespaces which will probably work. However, in this arrangement you will not be able to use the installation for app development (spk dev won't work). But if you weren't planning to do development, everything else should be fine. (We hope to make spk dev work in this setup someday, but it requires kernel support for mounting FUSE filesystems in a UID namespace, which isn't there yet.)

When you arrange to run as non-root, the installer does not create an initscript for you. Something like this should work, though:

#! /bin/bash
### BEGIN INIT INFO
# Provides:          sandstorm
# Required-Start:    $local_fs $remote_fs $networking $syslog
# Required-Stop:     $local_fs $remote_fs $networking $syslog
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: starts Sandstorm personal cloud server
### END INIT INFO

DESC="Sandstorm server"
DAEMON=/opt/sandstorm/sandstorm
USER=sandstorm

exec su $USER -s "$DAEMON" -- "$@"

from sandstorm.

Hey Kenton,

Thx for the help but running standstorm as non root user did not work either.
The installation part finished without complaining but when I try to start sandstorm via

/home/fgrosse/sandstorm/sandstorm start

I get a somewhat similar error:

*** Uncaught exception ***
src/sandstorm/run-bundle.c++:1307: error from OS: unshare(CLONE_NEWUSER): Invalid argument
stack: 0x467fdd 0x46b634 0x41d2a7 0x425e44 0x425d69 0x425d5a 0x4733ff 0x474a0d 0x474cf6 0x468636 0x46d81d 0x407292 0x4bc3b0 0x401227

I guess I will try this on a real dedicated root server as soon as I have some more time and access to another server, Until then I guess the issue could be closed from my point of view but if you want to investigate this further I'lle be happy to try something else or give more information. I leave that for you to decide.

Best regards and keep up the great work
Friedrich

from sandstorm.

Huh. Apparently your kernel doesn't support userns creation. Perhaps this is a property of linux-vserver; it wouldn't surprise me if it conflicts. Well, Sandstorm definitely can't work without user namespaces, so I guess you're stuck. :/ Sorry!

from sandstorm.