gvisor
gvisor copied to clipboard
Error creating container
Description
➜ ~ nerdctl run --detach --privileged --runtime "io.containerd.runsc.v1" --name fedora docker.io/library/fedora:36
WARN[0000] cannot set cgroup manager to "systemd" for runtime "io.containerd.runsc.v1"
FATA[0000] failed to create shim task: OCI runtime create failed: creating container: cannot set up cgroup for root: configuring cgroup: cgroup: Memory.Swap is set without Memory.Limit: unknown
➜ ~ ctr run -d --runtime "io.containerd.runsc.v1" --privileged -t docker.io/library/fedora:36 fedora
ctr: failed to create shim task: OCI runtime create failed: creating container: cannot create sandbox: cannot read client sync file: waiting for sandbox to start: EOF: unknown
Steps to reproduce
Error creating container
runsc version
➜ ~ runsc --version
runsc version release-20220713.0
spec: 1.0.2-dev
➜ ~ containerd -v
containerd github.com/containerd/containerd v1.6.6 10c12954828e7c7c9b6e0ea9b0c02b01407d3ae1
uname
Linux localhost.localdomain 5.18.15-200.fc36.x86_64 #1 SMP PREEMPT_DYNAMIC Sun Jul 31 21:30:34 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
kubectl (if using Kubernetes)
No response
repo state (if built from source)
No response
runsc debug logs (if available)
No response
Hi, it seems this could be an issue with the runsc systemd-cgroup driver. Are you passing any custom cgroup settings like memory limit to the container?
I also hit this error message:
ctr: failed to create shim task: OCI runtime create failed: creating container: cannot create sandbox: cannot read client sync file: waiting for sandbox to start: EOF: unknown
And for me the cause was the path of the source of a mount in the OCI spec not existing.
A friendly reminder that this issue had no activity for 120 days.
This issue has been closed due to lack of activity.