when using runsc: flag provided but not defined: -no-new-keyring

[dseomn]

With ~/.config/containers/containers.conf containing:

[engine]
  runtime = "runsc"

I get this error from buildah/runsc:

error running container: from /usr/bin/runsc creating container for [(REDACTED)]: flag provided but not defined: -no-new-keyring

It looks like --no-new-keyring is a runc flag, but I don't see any evidence of that flag for gvisor/runsc.

[nalind]

@giuseppe is there some method of knowing whether or not the runtime can accept this flag that's better than checking the error output for "no-new-keyring" if it errors out at this step?

[giuseppe]

some OCI runtimes (crun and runc do) got a new verb features to check what features are supported, but I see that both runtimes do not mention no-new-keyring and that runsc does not support features at all.

Is no-new-keyring something we could avoid though? That should work now from a rootless user namespace (that was fixed some years ago IIRC)

[github-actions[bot]]

A friendly reminder that this issue had no activity for 30 days.