Issues with non-Docker runtimes | Dagger | Page 1

turbid hedge Jul 23, 2024, 5:33 AM

#

Specifically this is what i'm seeing. Works when I use Docker

Stdout:
invoke: input: container.publish resolve: failed to solve for container publish: process "/dev/.buildkit_qemu_emulator update-ca-certificates" did not complete successfully: failed to copy xattrs: failed to set xattr "security.selinux" on /tmp/buildkit-qemu-emulator2896312290/dev/.buildkit_qemu_emulator: operation not supported

atomic badger Jul 23, 2024, 12:05 PM

#

I ran into some different issues using podman on Linux in the past with commands that worked in Docker but not in Podman.

#

What filesystem are you using on MacOS in the docker VM? The error that your gettting is that xattrs are not supported which is how Linux stores posix acl (when basic posix permissions are too simple) and RBAC controls like selinux and app armor.

#

Actually this seems to be a qemu issue requiring the emulator to be configured for cross arch stuff: https://github.com/docker/buildx/issues/584#issuecomment-827122004

GitHub

buildx try to copy xattrs (Extended file attributes) and fail · Iss...

I use buildx to build multiplatform docker image in the gitlab-ci. But the ci fail while building docker image, because it try to copy xattrs and fail to do this: > [linux/arm/v7 2/4] RUN set -x...

turbid hedge Jul 23, 2024, 12:42 PM

#

The same works with Docker though. I haven't made any custom changes to docker. It's what comes ootb.

turbid hedge Jul 23, 2024, 1:42 PM

#

The filesystem used by docker is overlayfs2 but with podman its xfs.

#

According to the issue linked above, it's an issue with buildx. How does that come into play within the dagger engine though? The engine buildkit version is the same. I am far from an expert in this area though. My goal is to have to inform my dagger users consistently on how to utilize it. I don't want them to have to do custom docker/podman engine shenanigans to get going. I am planning on trying some other tools like nerdctl also.

#Issues with non-Docker runtimes