runc 网络设置

huan_77

于 2020-09-11 14:54:17 发布

阅读量667

点赞数

分类专栏： runc 文章标签： docker

本文链接：https://blog.csdn.net/huan_77/article/details/108534439

版权

在使用runc启动容器时，遇到网络配置缺失导致的权限错误，如setgroups等相关操作失败。通过修改config.json文件，参考https://github.com/opencontainers/runc/issues/1860，可以解决apt update等命令执行报错的问题。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

当使用runc的时候，没有自带的网络设置，十分麻烦。

在我使用原始config.json的时候，在容器内使用apt update 会报错

E: setgroups 65534 failed - setgroups (1: Operation not permitted)
E: setegid 65534 failed - setegid (1: Operation not permitted)
E: seteuid 100 failed - seteuid (1: Operation not permitted)
E: setgroups 0 failed - setgroups (1: Operation not permitted)

......

可以把config.json改为

{
	"ociVersion": "1.0.0",
	"process": {
		"terminal": true,
		"user": {},
		"args": [
			"bash"
		],
		"env": [
			"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
			"TERM=xterm"
		],
		"cwd": "/",
		"capabilities": {
			"bounding": [
				"CAP_AUDIT_WRITE",
				"CAP_KILL",
				"CAP_NET_BIND_SERVICE",
                                "CAP_CHOWN",
                                "CAP_DAC_OVERRIDE",
                                "CAP_FSETID",
                                "CAP_FOWNER",
                                "CAP_MKNOD",
                                "CAP_NET_RAW",
                                "CAP_SETGID",
                                "CAP_SETUID",
                                "CAP_SETFCAP",
                                "CAP_SETPCAP",
                                "CAP_NET_BIND_SERVICE",
                                "CAP_SYS_CHROOT",
                                "CAP_KILL",
                                "CAP_AUDIT_WRITE"
			],
			"effective&#

最低0.47元/天解锁文章