buildah 似乎无法处理 `npm install` 写入文件“`/sys/fs/cgroup/cgroup.subtree_control`：不支持操作”

Question

情况

当我尝试使用 buildah 构建容器镜像时出现以下错误。

[1/2] STEP 7/8: RUN npm install
error running container: error from crun creating container for [/bin/sh -c npm install]: writing file `/sys/fs/cgroup/cgroup.subtree_control`: Operation not supported

Environment/steps

1. 我已经在名为 tools-image
的 ubuntu 容器映像中安装了 buildah
2. 我 运行 这个 tools-image macOS 上的容器
3. 我使用 docker 到 运行 tool-image 容器
4. 我用
启动 tools-image 容器

docker run -it --privileged --name demo -v "$(pwd)":/localmachine
    "myname/myname:v1" /bin/bash

5. 我在 tools-image buildah 内部使用构建一个 example application 容器镜像

buildah bud -t test:v1 -f Dockerfile .

example application 容器镜像的 Dockerfile 我使用 buildah bud 命令

这是Dockerfile.

##############################
#           BUILD
##############################
FROM docker.io/node:17-alpine as BUILD 
COPY src /usr/src/app/src
COPY public /usr/src/app/public
COPY package.json /usr/src/app/
COPY babel.config.js /usr/src/app/
WORKDIR /usr/src/app/
RUN npm install
RUN npm run build

##############################
#           EXAMPLE
##############################
# https://blog.openshift.com/deploy-vuejs-applications-on-openshift/
FROM docker.io/nginx:1.21.4-alpine

RUN apk update \
    apk upgrade \
    apk add --update coreutils

# Add a user how will have the rights to change the files in code
RUN addgroup -g 1500 nginxusers 
RUN adduser --disabled-password -u 1501 nginxuser nginxusers 

# Configure ngnix server
COPY nginx-os4-webapp.conf /etc/nginx/nginx.conf
WORKDIR /code
COPY --from=BUILD /usr/src/app/dist .

# https://zingzai.medium.com/externalise-and-configure-frontend-environment-variables-on-kubernetes-e8e798285b3e
# Configure web-app for environment variable usage
WORKDIR /
COPY docker_entrypoint.sh .
COPY generate_env-config.sh .
RUN chown nginxuser:nginxusers docker_entrypoint.sh
RUN chown nginxuser:nginxusers generate_env-config.sh
RUN chmod 777 docker_entrypoint.sh generate_env-config.sh
RUN chown -R nginxuser:nginxusers /code
RUN chown -R nginxuser:nginxusers /etc/nginx
RUN chown -R nginxuser:nginxusers /tmp
RUN chmod 777 /code
RUN chmod 777 /tmp
RUN chmod 777 /etc/nginx

USER nginxuser

EXPOSE 8080
CMD ["/bin/sh","docker_entrypoint.sh"]

执行时出错

[1/2] STEP 1/8: FROM docker.io/node:12-alpine AS BUILD
[1/2] STEP 2/8: COPY src /usr/src/app/src
--> d6601e0d631
[1/2] STEP 3/8: COPY public /usr/src/app/public
--> febd88b92b3
[1/2] STEP 4/8: COPY package.json /usr/src/app/
--> 26675130145
[1/2] STEP 5/8: COPY babel.config.js /usr/src/app/
--> 1006f1e8cf3
[1/2] STEP 6/8: WORKDIR /usr/src/app/
--> af1b28ef62c
[1/2] STEP 7/8: RUN npm install
error running container: error from crun creating container for [/bin/sh -c npm install]: writing file `/sys/fs/cgroup/cgroup.subtree_control`: Operation not supported
: exit status 1
[2/2] STEP 1/22: FROM docker.io/nginx:1.21.4-alpine
Trying to pull docker.io/library/nginx:1.21.4-alpine...
error building at STEP "RUN npm install": error while running runtime: exit status 1

Answer 1

它与 podman 一起工作！

为我解决问题的步骤：

1. 我在 macOS
上安装了 podman
2. 我用 podman
构建了 tools-image
3. 我使用以下命令启动了 tools-image

podman run -it --rm  --privileged --name demo "tools-image:v1"

4. 我将 example application 的代码克隆到 tools-image 运行 容器中
5. I 运行 buildah 使用以下命令

buildah bud -t test:v1 -f Dockerfile .

结果

它与 podman 一起工作！

[2/2] COMMIT test:v1
Getting image source signatures
Copying blob 1a058d5342cc [--------------] 0.0b / 0.0b
Copying blob ad93babfd60c [--------------] 0.0b / 0.0b
Copying blob 5af959103b90 [--------------] 0.0b / 0.0b
Copying blob 385374b911f2 [--------------] 0.0b / 0.0b
Copying blob eabae5075c43 [--------------] 0.0b / 0.0b
Copying blob 3d71b657b020 [--------------] 0.0b / 0.0b
Copying blob 57627a47445a done  
Copying config 204e250881 [========] 10.6KiB / 10.6KiB
Writing manifest to image destination
Storing signatures
--> 204e250881d
Successfully tagged localhost/test:v1
204e250881d44984be77c4abfef100880bda165b3d195606880fcad026b57003