buildah: unshare(CLONE_NEWUSER): Operation not permitted

[distorhead]

Before proceeding

• I didn't find a similar issue

Version

1.2.230

Info

The complete error message may look as follows:

Error during unshare(CLONE_NEWUSER): Operation not permitted
ERRO[0000] error parsing PID "": strconv.Atoi: parsing "": invalid syntax
ERRO[0000] (unable to determine exit status)

How to fix

Disable AppArmor and seccomp profiles with --security-opt seccomp=unconfined and --security-opt apparmor=unconfined, add special annotations to a Pod or use a privileged container. Details:

• https://werf.io/guides/nodejs/400_ci_cd_workflow/030_gitlab_ci_cd/030_kubernetes_executor.html#linux-kernel-with-rootless-overlayfs-1
• https://werf.io/guides/nodejs/400_ci_cd_workflow/030_gitlab_ci_cd/020_docker_executor.html#linux-kernel-with-rootless-overlayfs