Skip to content

AlmaLinux 8 Broken Rootless Cgroup Tests? #5003

@cyphar

Description

@cyphar

I've started seeing this in some CI runs of the rootless cgroup integration tests:

not ok 262 update cgroup v1/v2 common limits
# (in test file tests/integration/update.bats, line 30)
#   `[ "$status" -eq 0 ]' failed
# runc spec --rootless (status=0)
#
# runc run -d --console-socket /tmp/bats-run-42dmRt/runc.BWUvPF/tty/sock test_update (status=1)
# time="2025-11-12T04:51:04Z" level=error msg="runc run failed: unable to start container process: unable to apply cgroup configuration: mkdir /sys/fs/cgroup/devices/runc-cgroups-integration-test: permission denied"
# --- teardown ---
# rmdir: failed to remove '/sys/fs/cgroup/cpuset//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/cpu//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/cpuacct//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/blkio//runc-cgroups-integration-test': No such file or directory
# rmdir: failed to remove '/sys/fs/cgroup/memory//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/devices//runc-cgroups-integration-test': No such file or directory
# rmdir: failed to remove '/sys/fs/cgroup/freezer//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/net_cls//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/perf_event//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/net_prio//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/hugetlb//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/pids//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/rdma//runc-cgroups-integration-test': Permission denied
# rmdir: failed to remove '/sys/fs/cgroup/systemd//runc-cgroups-integration-test': Permission denied

(This applies to quite a few tests, the above is just an example.)

I guess something about our rootless setup on AlmaLinux 8 broke in the past day or so?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions