[HTCondor-users] Failed to Unshare the mount namespace errno

[Boris Sadkhin <bsadkhin.anl@xxxxxxxxx>]

Hi,

Sorry my previous email was sent unfinished.

 

I am trying to run a condor worker in a docker container, with /sys/fs/cgroup:/sys/fs/cgroup mounted, with the daemons running as root process. However, I am getting some errors when the container is not being run privileged mode.

 

======================

2394.000:Â Job is held.

Hold reason: Error from slot1@ci-core-condorworkernjs-unpriv-1: Failed to execute '/var/lib/condor/execute/dir_201/condor_exec.exe': (errno=1: 'Operation not permitted')

======================

Running job as user nobody

Failed to unshare the mount namespace errno

Warning: Create_Process: failed to read child process failure code

Create_Process(/var/lib/condor/execute/dir_219/condor_exec.exe): child failed with errno 1 (Operation not permitted) before exec()

Create_Process(/var/lib/condor/execute/dir_219/condor_exec.exe,, ...) failed: (errno=1: 'Operation not permitted')

======================

And in the proclog I see an error for removing the cgroups

Unable to completely remove cgroup htcondor/condor_var_lib_condor_execute_slot1@ci-core-condorworkernjs-unpriv-1 for. 50016 No such file or directory

 

Any help would be appreciated,

Thanks,

Boris