也许有人能帮我得到这份工作。我正在尝试让一个podman容器在Debian 11上运行。
podman run hello-world
但是，即使我尝试运行一个简单的容器，如"hello-world"，它抛出以下错误消息:
ERRO[0001] Error preparing container 99c7bce612f4a441497627eecf54e4e2f837d0a291011f200da2f4e433f8b661: /usr/bin/slirp4netns failed: "open("/dev/net/tun"): Permission deniednWARNING: Support for seccomp is experimentalnchild failed(1)nWARNING: Support for seccomp is experimentaln"
Error: error resolving storage path for container 99c7bce612f4a441497627eecf54e4e2f837d0a291011f200da2f4e433f8b661: lstat /home/pod/.local/share/containers/storage/overlay/66399d4ae95a12daac74b51828df30cfb5a543a2b49a9aad70bf03ebe3e200a3/merged: invalid argument
我已经为此提交了一个错误，但也许有人有一些建议或解决方法来让这个工作。这里是所有可能需要的信息来帮助解决这个问题:
podman version输出:
Version: 3.4.2
API Version: 3.4.2
Go Version: go1.15.15
Built: Thu Jan 1 01:00:00 1970
OS/Arch: linux/amd64
podman info --debug输出:
host:
arch: amd64
buildahVersion: 1.23.1
cgroupControllers: []
cgroupManager: cgroupfs
cgroupVersion: v1
conmon:
package: 'conmon: /usr/libexec/podman/conmon'
path: /usr/libexec/podman/conmon
version: 'conmon version 2.1.2, commit: '
cpus: 4
distribution:
codename: bullseye
distribution: debian
version: "11"
eventLogger: journald
hostname: h2977318.stratoserver.net
idMappings:
gidmap:
- container_id: 0
host_id: 1000
size: 1
- container_id: 1
host_id: 100000
size: 65536
uidmap:
- container_id: 0
host_id: 1000
size: 1
- container_id: 1
host_id: 100000
size: 65536
kernel: 4.19.0
linkmode: dynamic
logDriver: journald
memFree: 8006328320
memTotal: 8589934592
ociRuntime:
name: crun
package: 'crun: /usr/bin/crun'
path: /usr/bin/crun
version: |-
crun version UNKNOWN
commit: ea1fe3938eefa14eb707f1d22adff4db670645d6
spec: 1.0.0
+SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +CRIU +YAJL
os: linux
remoteSocket:
path: /run/user/1000/podman/podman.sock
security:
apparmorEnabled: false
capabilities: CAP_AUDIT_WRITE,CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_MKNOD,CAP_NET_BIND_SERVICE,CAP_NET_RAW,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
rootless: true
seccompEnabled: true
seccompProfilePath: /usr/share/containers/seccomp.json
selinuxEnabled: false
serviceIsRemote: false
slirp4netns:
executable: /usr/bin/slirp4netns
package: 'slirp4netns: /usr/bin/slirp4netns'
version: |-
slirp4netns version 1.1.8
commit: unknown
libslirp: 4.3.1-git
SLIRP_CONFIG_VERSION_MAX: 3
libseccomp: 2.5.1
swapFree: 0
swapTotal: 0
uptime: 23h 34m 25.33s (Approximately 0.96 days)
plugins:
log:
- k8s-file
- none
- journald
network:
- bridge
- macvlan
volume:
- local
registries:
search:
- docker.io
- quay.io
store:
configFile: /home/dennis/.config/containers/storage.conf
containerStore:
number: 14
paused: 0
running: 0
stopped: 14
graphDriverName: overlay
graphOptions:
overlay.mount_program:
Executable: /usr/bin/fuse-overlayfs
Package: 'fuse-overlayfs: /usr/bin/fuse-overlayfs'
Version: |-
fusermount3 version: 3.10.3
fuse-overlayfs: version 1.5
FUSE library version 3.10.3
using FUSE kernel interface version 7.31
graphRoot: /home/dennis/.local/share/containers/storage
graphStatus:
Backing Filesystem: extfs
Native Overlay Diff: "false"
Supports d_type: "true"
Using metacopy: "false"
imageStore:
number: 2
runRoot: /run/user/1000/containers
volumePath: /home/dennis/.local/share/containers/storage/volumes
version:
APIVersion: 3.4.2
Built: 0
BuiltTime: Thu Jan 1 01:00:00 1970
GitCommit: ""
GoVersion: go1.15.15
OsArch: linux/amd64
Version: 3.4.2
包信息(例如rpm -q podman或apt list podman的输出):
Auflistung… Fertig
podman/unbekannt,now 100:3.4.2-4 amd64 [Konfiguration-verbleibend]
podman/unbekannt 100:3.4.2-4 arm64
podman/unbekannt 100:3.4.2-4 armhf
podman/unbekannt 100:3.4.2-4 i386
podman/unbekannt 100:3.4.2-4 ppc64el
podman/unbekannt 100:3.4.2-4 s390x
sudo ls -al /dev/net/tun输出:
[sudo] Passwort für dennis:
crw-rw-rw- 1 root root 10, 200 21. Jun 18:59 /dev/net/tun
也加载了tun模块sudo lsmod |grep tun输出:→
tun 4242 -2
vznetstat 4242 -2 tun,ip_vznetstat,ip6_vznetstat
事先非常感谢您的支持，如果您需要进一步的信息，请告诉我。
哦，现在可以用了。我必须安装新版本的podman ->podman-4.1.1，则I必须安装保险丝覆盖层。之后，我需要再次创建/dev/fuse:
sudo mknod/dev/fuse -m 0666 c 10 229
非常感谢您的支持和努力。