Docker fails with permission error (since version 1.19)

[severindellsperger]

Docker fails with permission error (since version 1.19)

[powersj]

su-exec: telegraf: Operation not permitted

are you using docker or some other runtime?

I know your examples show 'docker' as the command, but I want to be sure as some alias podman to docker for example and as I have not seen docker itself throw this error.

# does not work
docker run --rm -v $PWD/telegraf-pt-sample.conf:/etc/telegraf/telegraf.conf:ro telegraf

When you say it does not work Is the error from su-exec? This works just fine as my normal user and a simple config, so what am I missing with this?

[severindellsperger]

Oh yes, indeed podman is my runtime.
I just tested it with docker as the runtime and it worked.
Anyway, I think it could be solved to run also with podman by introducing the USER introduction (see above).

Yeah, it does not work. Here is the full trace:

docker run  --rm  -v $PWD/telegraf-pt-sample.conf:/etc/telegraf/telegraf.conf:ro telegraf
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
setpriv: failed to execute telegraf: Operation not permitted

[powersj]

Adding user like that will cause issues for users who are trying to install additional packages. I know because we already did this once in 8352018 that caused a firestorm of issues, which is why we used su-exec in 069df69

My suggestion to you is to read through #646 to set the correct capabilities.

[severindellsperger]

Alright, so let's close this issue at this point.
Thanks for the clarification.