Skip to content

OCI-Mode bind failures with runc 1.2+ #3716

Closed
@dtrudg

Description

@dtrudg

runc 1.2 and above check for fs specific options in a bind mount definition, and fails if present as they won't be effective.... apparently we have some of these sneaking in...

Not seen in CI as we are using crun over runc, and crun is installed in the CI environment.

    === NAME  TestE2E/PAR/ACTIONS/ociBinds/OCIUser/WorkdirTmpBind
        oci.go:778:
            "/usr/bin/singularity exec --oci --workdir /tmp/stest.2262486120/bind-workspace-953483620/workdir --bind /tmp/stest.2262486120/bind-workspace-953483620/canary:/tmp/canary/dir oci-sif:/tmp/stest.2262486120/oci-sif.sif test -f /tmp/canary/dir/file" output:
            WARNING: XDG_RUNTIME_DIR is not set
            WARNING: DBUS_SESSION_BUS_ADDRESS is not set
            INFO:    System configuration does not support cgroup management - starting container in current cgroup
            time="2025-06-20T10:22:52Z" level=error msg="runc run failed: invalid mount &{Source:/tmp/stest.2262486120/bind-workspace-953483620/workdir/tmp Destination:/tmp Device:bind Flags:2117634 ClearedFlags:0 PropagationFlags:[] Data:mode=777 Relabel: RecAttr:<nil> Extensions:0 IDMapping:<nil>}: bind mounts cannot have any filesystem-specific options applied"
  
        oci.go:778: got 1 as exit code and was expecting 0: exit status 1
            waiting for command "/usr/bin/singularity exec --oci --workdir /tmp/stest.2262486120/bind-workspace-953483620/workdir --bind /tmp/stest.2262486120/bind-workspace-953483620/canary:/tmp/canary/dir oci-sif:/tmp/stest.2262486120/oci-sif.sif test -f /tmp/canary/dir/file"
            github.com/sylabs/singularity/v4/e2e/internal/e2e.TestEnv.RunSingularity.func1
                    github.com/sylabs/singularity/v4/e2e/internal/e2e/singularitycmd.go:673
            testing.tRunner
                    testing/testing.go:1792
            runtime.goexit
                    runtime/asm_arm64.s:1223

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions