aboutsummaryrefslogtreecommitdiff
path: root/troubleshooting.md
diff options
context:
space:
mode:
authorGiuseppe Scrivano <gscrivan@redhat.com>2022-02-10 09:39:49 +0100
committerGiuseppe Scrivano <gscrivan@redhat.com>2022-02-10 17:08:54 +0100
commita0b38c071b9b159810f9fc226fcc001ba0202894 (patch)
treea660a12095dff40a56cf1446cbb11d8248afa886 /troubleshooting.md
parent12836a5610ea6d4f6844d4fbdc222b439ccbc746 (diff)
downloadpodman-a0b38c071b9b159810f9fc226fcc001ba0202894.tar.gz
podman-a0b38c071b9b159810f9fc226fcc001ba0202894.tar.bz2
podman-a0b38c071b9b159810f9fc226fcc001ba0202894.zip
troubleshooting: add doc for ssh into a container
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Diffstat (limited to 'troubleshooting.md')
-rw-r--r--troubleshooting.md19
1 files changed, 19 insertions, 0 deletions
diff --git a/troubleshooting.md b/troubleshooting.md
index 82ca64305..8fcce22a7 100644
--- a/troubleshooting.md
+++ b/troubleshooting.md
@@ -919,3 +919,22 @@ After deleting a client VM on macOS via `podman machine stop` && `podman machine
### Solution
You will need to remove the hanging gv-proxy process bound to the port in question. For example, if the port mentioned in the error message is 127.0.0.1:7777, you can use the command `kill -9 $(lsof -i:7777)` in order to identify and remove the hanging process which prevents you from starting a new VM on that default port.
+
+### 32) The sshd process fails to run inside of the container.
+
+#### Symptom
+
+The sshd process running inside the container fails with the error
+"Error writing /proc/self/loginuid".
+
+### Solution
+
+If the `/proc/self/loginuid` file is already initialized then the
+`CAP_AUDIT_CONTROL` capability is required to override it.
+
+This happens when running Podman from a user session since the
+`/proc/self/loginuid` file is already initialized. The solution is to
+run Podman from a system service, either using the Podman service, and
+then using podman -remote to start the container or simply by running
+something like `systemd-run podman run ...`. In this case the
+container will only need `CAP_AUDIT_WRITE`.