Distrobox doesn't work on exohub #170
Labels
No Label
bug
duplicate
enhancement
help wanted
invalid
question
security
wontfix
No Milestone
No project
No Assignees
1 Participants
Notifications
Total Time Spent: 32 minutes 3 seconds
Due Date
a
32 minutes 3 seconds
No due date set.
Dependencies
No dependencies set.
Reference: exozyme/exozyme#170
Loading…
Reference in New Issue
No description provided.
Delete Branch "%!s(<nil>)"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This is the error when you try to create a Distrobox:
I think it's because user namespaces are disabled in the exohub systemd sandboxing.
This is similar to #129. Also, this is the default systemd sandboxing we use for JupyterHub:
I disabled all of the systemd sandboxing for exohub and now distrobox works! I'm considering now whether to try re-enabling some of the sandboxing.
Alright, I re-enabled all the sandboxing options except for the following:
Now Podman and Distrobox seem to work! Just reopen this issue if you still encounter any problems.
It looks like Distrobox is still broken:
Setting
RestrictSUIDSGID=false
fixes the issue.Oh oops, I'm getting a new error now:
Adding
ProtectHostname=false
fixes that issue.OK, the issue still seems to be persistent. Here are some more errors I've encountered on exohub:
I think it might be a good idea at this point to just disable exohub sandboxing altogether, since it's causing more and more problems.
I disabled the following options:
The only sandboxing I kept enabled is
ProtectProc
since it seems like it needs to be enabled, andReadWritePaths
.TL;DR exohub isn't a great environment for Distrobox, and use SSH or remote desktop instead if you can.