{"action":"created","issue":{"url":"https://api.github.com/repos/projectatomic/buildah/issues/1011","repository_url":"https://api.github.com/repos/projectatomic/buildah","labels_url":"https://api.github.com/repos/projectatomic/buildah/issues/1011/labels{/name}","comments_url":"https://api.github.com/repos/projectatomic/buildah/issues/1011/comments","events_url":"https://api.github.com/repos/projectatomic/buildah/issues/1011/events","html_url":"https://github.com/projectatomic/buildah/issues/1011","id":359842195,"node_id":"MDU6SXNzdWUzNTk4NDIxOTU=","number":1011,"title":"Buildah cannot be executed in the non-privileged container of k8s","user":{"login":"q384566678","id":19640187,"node_id":"MDQ6VXNlcjE5NjQwMTg3","avatar_url":"https://avatars0.githubusercontent.com/u/19640187?v=4","gravatar_id":"","url":"https://api.github.com/users/q384566678","html_url":"https://github.com/q384566678","followers_url":"https://api.github.com/users/q384566678/followers","following_url":"https://api.github.com/users/q384566678/following{/other_user}","gists_url":"https://api.github.com/users/q384566678/gists{/gist_id}","starred_url":"https://api.github.com/users/q384566678/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/q384566678/subscriptions","organizations_url":"https://api.github.com/users/q384566678/orgs","repos_url":"https://api.github.com/users/q384566678/repos","events_url":"https://api.github.com/users/q384566678/events{/privacy}","received_events_url":"https://api.github.com/users/q384566678/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-13T10:47:36Z","updated_at":"2018-09-13T11:03:58Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"I created a non-privileged container in k8s, but could not execute buildah. Later, I found that it could be executed correctly before this [patch](https://github.com/projectatomic/buildah/pull/836/commits/f1f087c8e51b3854a1ef2cb9127fe7e7a3f885cb) ,but it could not be executed after this patch modified the `unshare.go` file.\r\n\r\nIf I add privileges to the `yaml` file, I can execute buildah correctly.\r\n\r\nError info:\r\n```\r\nroot@zz-ubuntu-78f657b855-ljrx8:~# buildah images\r\nError during unshare(CLONE_NEWUSER): Invalid argument\r\nERRO[0000] error parsing PID \"\": strconv.Atoi: parsing \"\": invalid syntax \r\nERRO[0000] (unable to determine exit status)  \r\n```\r\n\r\nyaml file for creating non-privileged containers in k8s:\r\n```\r\n$ cat ubuntu.yaml \r\napiVersion: apps/v1\r\nkind: Deployment\r\nmetadata:\r\n  name: zz-ubuntu\r\n  labels: \r\n    label: ubuntu-1\r\nspec:\r\n  replicas: 1\r\n  selector:\r\n    matchLabels:\r\n      app: my-ubuntu\r\n  template:\r\n    metadata:\r\n      labels:\r\n        app: my-ubuntu\r\n    spec:\r\n      containers:\r\n      - name: test-ubuntu\r\n        image: ubuntu:16.04\r\n        command: [\"sleep\", \"10000\"]\r\n```\r\nOutput of buildah version:\r\n```\r\nVersion:         1.4-dev\r\nGo Version:      go1.8.7\r\nImage Spec:      1.0.0\r\nRuntime Spec:    1.0.0\r\nCNI Spec:        0.4.0\r\nlibcni Version:  v0.7.0-alpha1\r\nGit Commit:      07aa077\r\nBuilt:           Thu Sep 13 10:34:15 2018\r\nOS/Arch:         linux/amd64\r\n```\r\n\r\nOutput of uname -a:\r\n```\r\nLinux zz-ubuntu-78f657b855-ljrx8 3.10.0-862.11.6.el7.x86_64 #1 SMP Tue Aug 14 21:49:04 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/projectatomic/buildah/issues/comments/420969122","html_url":"https://github.com/projectatomic/buildah/issues/1011#issuecomment-420969122","issue_url":"https://api.github.com/repos/projectatomic/buildah/issues/1011","id":420969122,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMDk2OTEyMg==","user":{"login":"TomSweeneyRedHat","id":25613829,"node_id":"MDQ6VXNlcjI1NjEzODI5","avatar_url":"https://avatars3.githubusercontent.com/u/25613829?v=4","gravatar_id":"","url":"https://api.github.com/users/TomSweeneyRedHat","html_url":"https://github.com/TomSweeneyRedHat","followers_url":"https://api.github.com/users/TomSweeneyRedHat/followers","following_url":"https://api.github.com/users/TomSweeneyRedHat/following{/other_user}","gists_url":"https://api.github.com/users/TomSweeneyRedHat/gists{/gist_id}","starred_url":"https://api.github.com/users/TomSweeneyRedHat/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TomSweeneyRedHat/subscriptions","organizations_url":"https://api.github.com/users/TomSweeneyRedHat/orgs","repos_url":"https://api.github.com/users/TomSweeneyRedHat/repos","events_url":"https://api.github.com/users/TomSweeneyRedHat/events{/privacy}","received_events_url":"https://api.github.com/users/TomSweeneyRedHat/received_events","type":"User","site_admin":false},"created_at":"2018-09-13T11:03:58Z","updated_at":"2018-09-13T11:03:58Z","author_association":"MEMBER","body":"@giuseppe PTAL"}}
{"actor":{"display_login":"TomSweeneyRedHat"}}