.NET 6 image container-in-container build fails with set propagation for `proc`: Permission denied
Issue
Build of .NET in container-inside-container returns: set propagation for
proc: Permission denied
cd $ /path/.net
$ ls
Dockerfile
[fdemeloj@fdemeloj-thinkpadp1gen3 .net]$ cat Dockerfile
# use dotnet-60 base image
FROM registry.access.redhat.com/ubi8/dotnet-60
# setup dotnet project
RUN dotnet console
# restore project
$ podman run -it --name podman-in-podman -u 1000 -h podman-in-podman -v $(pwd)/Dockerfile:/home/podman/Dockerfile:Z --rm registry.access.redhat.com/ubi8/podman:8.8-14 bash
[podman@podman-in-podman /]$ cd /home/podman/
[podman@podman-in-podman ~]$ ls
Dockerfile
[podman@podman-in-podman ~]$ podman build -t localhost/dotnet-test .
STEP 1/3: FROM registry.access.redhat.com/ubi8/dotnet-60
Trying to pull registry.access.redhat.com/ubi8/dotnet-60:latest...
Getting image source signatures
Checking if image destination supports signatures
Copying blob 1f2574c47b65 done
Copying blob fb18a808197a done
Copying blob e5dd65eaa632 done
Copying config f95f9d0321 done
Writing manifest to image destination
Storing signatures
STEP 2/3: RUN dotnet console # or dotnet new console
WARN[0000] pkg/bind: error detaching "/var/tmp/buildah3544067749/mnt/buildah-bind-target-1": permission denied
WARN[0000] pkg/bind: error removing "/var/tmp/buildah3544067749/mnt/buildah-bind-target-1": device or resource busy
WARN[0000] pkg/bind: error removing "/var/tmp/buildah3544067749/mnt": directory not empty
ERRO[0000] permission denied
error running container: from /usr/bin/crun creating container for [/bin/sh -c dotnet console]: set propagation for `proc`: Permission denied
: exit status 1
Error: building at STEP "RUN dotnet console": while running runtime: exit status 1
Environment
- Red Hat Podman
- Red Hat build of .NET 6,7,8
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.