# Kann ./launcher app nicht eingeben

**URL:** <https://meta.discourse.org/t/cannot-use-launcher-enter-app/236323>\
**Category:** Self-hosting\
**Created:** [16. August 2022 um 15:03 UTC](https://meta.discourse.org/t/cannot-use-launcher-enter-app/236323 "2022-08-16T15:03:53Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Falco](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/falco/32/179432_2.png) [@Falco](https://meta.discourse.org/u/Falco)\
**Post date:** [16. August 2022 um 16:04 UTC](https://meta.discourse.org/t/cannot-use-launcher-enter-app/236323/2 "2022-08-16T16:04:03Z")

</div>

Es scheint ein Fehler in runc 1.1.3 zu sein, siehe

> <https://github.com/containerd/containerd/issues/7219>
>
> \### Description
> 
> I have met a weird probelm that after I executing 'systemctl …daemon-reload' on any node inside my cluster, I can't exec into those pods on that node any more.
> 
> The error message shows that it is related to a permission issue.
> \`error: Internal error occurred: error executing command in container: failed to exec in container: failed to start exec "d54b2d2c946fd0295ac7551d4360a5c25f3c8c20efce2872188187228bd0c8de": OCI runtime exec failed: exec failed: unable to start container process: open /dev/pts/0: operation not permitted: unknown\`
> 
> All configurations are the default ones. And I didn't meet with this issue on containerd 1.5.5. It is the first time I have meet with this kind of issue on containerd 1.6.6
> 
> \### Steps to reproduce the issue
> 
> 1. Install containerd 1.6.6, start containerd via systemd, refer to : https://github.com/containerd/containerd/blob/main/docs/getting-started.md
> 2. Install a K8s cluster with kubeadm 1.24.2
> 3. Create a pod, like this example \`kubectl run nginx --image=nginx --port=80 --expose\`
> 5. run 'systemctl daemon-reload'
> 6. Try to exec in container, like this example \`kubectl exec -ti nginx -- bash\`
> 7. You will get the permission issue
> 
> 
> \### Describe the results you received and expected
> 
> Received:
> \`error: Internal error occurred: error executing command in container: failed to exec in container: failed to start exec "d54b2d2c946fd0295ac7551d4360a5c25f3c8c20efce2872188187228bd0c8de": OCI runtime exec failed: exec failed: unable to start container process: open /dev/pts/0: operation not permitted: unknown\`
> Expected:
> I want to exec in the container as usual.
> 
> \### What version of containerd are you using?
> 
> containerd github.com/containerd/containerd v1.6.6 10c12954828e7c7c9b6e0ea9b0c02b01407d3ae1
> 
> \### Any other relevant information
> 
> \`\`\`
> \# runc --version
> runc version 1.1.3
> commit: v1.1.3-0-g6724737f
> spec: 1.0.2-dev
> go: go1.17.10
> libseccomp: 2.5.4
> 
> \`\`\`
> 
> \`\`\`
> \# crictl info
> {
> "status": {
> "conditions": \[
> {
> "type": "RuntimeReady",
> "status": true,
> "reason": "",
> "message": ""
> },
> {
> "type": "NetworkReady",
> "status": true,
> "reason": "",
> "message": ""
> }
> \]
> },
> "cniconfig": {
> "PluginDirs": \[
> "/opt/cni/bin"
> \],
> "PluginConfDir": "/etc/cni/net.d",
> "PluginMaxConfNum": 1,
> "Prefix": "eth",
> "Networks": \[
> {
> "Config": {
> "Name": "cni-loopback",
> "CNIVersion": "0.3.1",
> "Plugins": \[
> {
> "Network": {
> "type": "loopback",
> "ipam": {},
> "dns": {}
> },
> "Source": "{\\"type\\":\\"loopback\\"}"
> }
> \],
> "Source": "{\\n\\"cniVersion\\": \\"0.3.1\\",\\n\\"name\\": \\"cni-loopback\\",\\n\\"plugins\\": \[{\\n \\"type\\": \\"loopback\\"\\n}\]\\n}"
> },
> "IFName": "lo"
> },
> {
> "Config": {
> "Name": "cilium",
> "CNIVersion": "0.3.1",
> "Plugins": \[
> {
> "Network": {
> "cniVersion": "0.3.1",
> "name": "cilium",
> "type": "cilium-cni",
> "ipam": {},
> "dns": {}
> },
> "Source": "{\\"cniVersion\\":\\"0.3.1\\",\\"enable-debug\\":false,\\"name\\":\\"cilium\\",\\"type\\":\\"cilium-cni\\"}"
> }
> \],
> "Source": "{\\"cniVersion\\":\\"0.3.1\\",\\"name\\":\\"cilium\\",\\"plugins\\":\[{\\"cniVersion\\":\\"0.3.1\\",\\"enable-debug\\":false,\\"name\\":\\"cilium\\",\\"type\\":\\"cilium-cni\\"}\]}"
> },
> "IFName": "eth0"
> }
> \]
> },
> "config": {
> "containerd": {
> "snapshotter": "overlayfs",
> "defaultRuntimeName": "runc",
> "defaultRuntime": {
> "runtimeType": "",
> "runtimePath": "",
> "runtimeEngine": "",
> "PodAnnotations": \[\],
> "ContainerAnnotations": \[\],
> "runtimeRoot": "",
> "options": {},
> "privileged\_without\_host\_devices": false,
> "baseRuntimeSpec": "",
> "cniConfDir": "",
> "cniMaxConfNum": 0
> },
> "untrustedWorkloadRuntime": {
> "runtimeType": "",
> "runtimePath": "",
> "runtimeEngine": "",
> "PodAnnotations": \[\],
> "ContainerAnnotations": \[\],
> "runtimeRoot": "",
> "options": {},
> "privileged\_without\_host\_devices": false,
> "baseRuntimeSpec": "",
> "cniConfDir": "",
> "cniMaxConfNum": 0
> },
> "runtimes": {
> "runc": {
> "runtimeType": "io.containerd.runc.v2",
> "runtimePath": "",
> "runtimeEngine": "",
> "PodAnnotations": \[\],
> "ContainerAnnotations": \[\],
> "runtimeRoot": "",
> "options": {
> "BinaryName": "",
> "CriuImagePath": "",
> "CriuPath": "",
> "CriuWorkPath": "",
> "IoGid": 0,
> "IoUid": 0,
> "NoNewKeyring": false,
> "NoPivotRoot": false,
> "Root": "",
> "ShimCgroup": "",
> "SystemdCgroup": true
> },
> "privileged\_without\_host\_devices": false,
> "baseRuntimeSpec": "",
> "cniConfDir": "",
> "cniMaxConfNum": 0
> }
> },
> "noPivot": false,
> "disableSnapshotAnnotations": true,
> "discardUnpackedLayers": false,
> "ignoreRdtNotEnabledErrors": false
> },
> "cni": {
> "binDir": "/opt/cni/bin",
> "confDir": "/etc/cni/net.d",
> "maxConfNum": 1,
> "confTemplate": "",
> "ipPref": ""
> },
> "registry": {
> "configPath": "",
> "mirrors": {},
> "configs": {},
> "auths": {},
> "headers": {
> "User-Agent": \[
> "containerd/v1.6.6"
> \]
> }
> },
> "imageDecryption": {
> "keyModel": "node"
> },
> "disableTCPService": true,
> "streamServerAddress": "127.0.0.1",
> "streamServerPort": "0",
> "streamIdleTimeout": "4h0m0s",
> "enableSelinux": false,
> "selinuxCategoryRange": 1024,
> "sandboxImage": "k8s.gcr.io/pause:3.2",
> "statsCollectPeriod": 10,
> "systemdCgroup": false,
> "enableTLSStreaming": false,
> "x509KeyPairStreaming": {
> "tlsCertFile": "",
> "tlsKeyFile": ""
> },
> "maxContainerLogSize": 16384,
> "disableCgroup": false,
> "disableApparmor": false,
> "restrictOOMScoreAdj": false,
> "maxConcurrentDownloads": 3,
> "disableProcMount": false,
> "unsetSeccompProfile": "",
> "tolerateMissingHugetlbController": true,
> "disableHugetlbController": true,
> "device\_ownership\_from\_security\_context": false,
> "ignoreImageDefinedVolumes": false,
> "netnsMountsUnderStateDir": false,
> "enableUnprivilegedPorts": false,
> "enableUnprivilegedICMP": false,
> "containerdRootDir": "/var/lib/containerd",
> "containerdEndpoint": "/run/containerd/containerd.sock",
> "rootDir": "/var/lib/containerd/io.containerd.grpc.v1.cri",
> "stateDir": "/run/containerd/io.containerd.grpc.v1.cri"
> },
> "golang": "go1.17.11",
> "lastCNILoadStatus": "OK",
> "lastCNILoadStatus.default": "OK"
> }
> 
> \`\`\`
> 
> \`\`\`
> \# uname -a
> Linux 4.18.0-348.el8.x86\_64 #1 SMP Mon Oct 4 12:17:22 EDT 2021 x86\_64 x86\_64 x86\_64 GNU/Linux
> \`\`\`
> 
> \### Show configuration if it is related to CRI plugin.
> 
> \`\`\`
> disabled\_plugins = \[\]
> imports = \[\]
> oom\_score = 0
> plugin\_dir = ""
> required\_plugins = \[\]
> root = "/var/lib/containerd"
> state = "/run/containerd"
> temp = ""
> version = 2
> 
> \[cgroup\]
> path = ""
> 
> \[debug\]
> address = ""
> format = ""
> gid = 0
> level = ""
> uid = 0
> 
> \[grpc\]
> address = "/run/containerd/containerd.sock"
> gid = 0
> max\_recv\_message\_size = 16777216
> max\_send\_message\_size = 16777216
> tcp\_address = ""
> tcp\_tls\_ca = ""
> tcp\_tls\_cert = ""
> tcp\_tls\_key = ""
> uid = 0
> 
> \[metrics\]
> address = ""
> grpc\_histogram = false
> 
> \[plugins\]
> 
> \[plugins."io.containerd.gc.v1.scheduler"\]
> deletion\_threshold = 0
> mutation\_threshold = 100
> pause\_threshold = 0.02
> schedule\_delay = "0s"
> startup\_delay = "100ms"
> 
> \[plugins."io.containerd.grpc.v1.cri"\]
> device\_ownership\_from\_security\_context = false
> disable\_apparmor = false
> disable\_cgroup = false
> disable\_hugetlb\_controller = true
> disable\_proc\_mount = false
> disable\_tcp\_service = true
> enable\_selinux = false
> enable\_tls\_streaming = false
> enable\_unprivileged\_icmp = false
> enable\_unprivileged\_ports = false
> ignore\_image\_defined\_volumes = false
> max\_concurrent\_downloads = 3
> max\_container\_log\_line\_size = 16384
> netns\_mounts\_under\_state\_dir = false
> restrict\_oom\_score\_adj = false
> sandbox\_image = "k8s.gcr.io/pause:3.2"
> selinux\_category\_range = 1024
> stats\_collect\_period = 10
> stream\_idle\_timeout = "4h0m0s"
> stream\_server\_address = "127.0.0.1"
> stream\_server\_port = "0"
> systemd\_cgroup = false
> tolerate\_missing\_hugetlb\_controller = true
> unset\_seccomp\_profile = ""
> 
> \[plugins."io.containerd.grpc.v1.cri".cni\]
> bin\_dir = "/opt/cni/bin"
> conf\_dir = "/etc/cni/net.d"
> conf\_template = ""
> ip\_pref = ""
> max\_conf\_num = 1
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd\]
> default\_runtime\_name = "runc"
> disable\_snapshot\_annotations = true
> discard\_unpacked\_layers = false
> ignore\_rdt\_not\_enabled\_errors = false
> no\_pivot = false
> snapshotter = "overlayfs"
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd.default\_runtime\]
> base\_runtime\_spec = ""
> cni\_conf\_dir = ""
> cni\_max\_conf\_num = 0
> container\_annotations = \[\]
> pod\_annotations = \[\]
> privileged\_without\_host\_devices = false
> runtime\_engine = ""
> runtime\_path = ""
> runtime\_root = ""
> runtime\_type = ""
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd.default\_runtime.options\]
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd.runtimes\]
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc\]
> base\_runtime\_spec = ""
> cni\_conf\_dir = ""
> cni\_max\_conf\_num = 0
> container\_annotations = \[\]
> pod\_annotations = \[\]
> privileged\_without\_host\_devices = false
> runtime\_engine = ""
> runtime\_path = ""
> runtime\_root = ""
> runtime\_type = "io.containerd.runc.v2"
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options\]
> BinaryName = ""
> CriuImagePath = ""
> CriuPath = ""
> CriuWorkPath = ""
> IoGid = 0
> IoUid = 0
> NoNewKeyring = false
> NoPivotRoot = false
> Root = ""
> ShimCgroup = ""
> SystemdCgroup = true
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd.untrusted\_workload\_runtime\]
> base\_runtime\_spec = ""
> cni\_conf\_dir = ""
> cni\_max\_conf\_num = 0
> container\_annotations = \[\]
> pod\_annotations = \[\]
> privileged\_without\_host\_devices = false
> runtime\_engine = ""
> runtime\_path = ""
> runtime\_root = ""
> runtime\_type = ""
> 
> \[plugins."io.containerd.grpc.v1.cri".containerd.untrusted\_workload\_runtime.options\]
> 
> \[plugins."io.containerd.grpc.v1.cri".image\_decryption\]
> key\_model = "node"
> 
> \[plugins."io.containerd.grpc.v1.cri".registry\]
> config\_path = ""
> 
> \[plugins."io.containerd.grpc.v1.cri".registry.auths\]
> 
> \[plugins."io.containerd.grpc.v1.cri".registry.configs\]
> 
> \[plugins."io.containerd.grpc.v1.cri".registry.headers\]
> 
> \[plugins."io.containerd.grpc.v1.cri".registry.mirrors\]
> 
> \[plugins."io.containerd.grpc.v1.cri".x509\_key\_pair\_streaming\]
> tls\_cert\_file = ""
> tls\_key\_file = ""
> 
> \[plugins."io.containerd.internal.v1.opt"\]
> path = "/opt/containerd"
> 
> \[plugins."io.containerd.internal.v1.restart"\]
> interval = "10s"
> 
> \[plugins."io.containerd.internal.v1.tracing"\]
> sampling\_ratio = 1.0
> service\_name = "containerd"
> 
> \[plugins."io.containerd.metadata.v1.bolt"\]
> content\_sharing\_policy = "shared"
> 
> \[plugins."io.containerd.monitor.v1.cgroups"\]
> no\_prometheus = false
> 
> \[plugins."io.containerd.runtime.v1.linux"\]
> no\_shim = false
> runtime = "runc"
> runtime\_root = ""
> shim = "containerd-shim"
> shim\_debug = false
> 
> \[plugins."io.containerd.runtime.v2.task"\]
> platforms = \["linux/amd64"\]
> sched\_core = false
> 
> \[plugins."io.containerd.service.v1.diff-service"\]
> default = \["walking"\]
> 
> \[plugins."io.containerd.service.v1.tasks-service"\]
> rdt\_config\_file = ""
> 
> \[plugins."io.containerd.snapshotter.v1.aufs"\]
> root\_path = ""
> 
> \[plugins."io.containerd.snapshotter.v1.btrfs"\]
> root\_path = ""
> 
> \[plugins."io.containerd.snapshotter.v1.devmapper"\]
> async\_remove = false
> base\_image\_size = ""
> discard\_blocks = false
> fs\_options = ""
> fs\_type = ""
> pool\_name = ""
> root\_path = ""
> 
> \[plugins."io.containerd.snapshotter.v1.native"\]
> root\_path = ""
> 
> \[plugins."io.containerd.snapshotter.v1.overlayfs"\]
> root\_path = ""
> upperdir\_label = false
> 
> \[plugins."io.containerd.snapshotter.v1.zfs"\]
> root\_path = ""
> 
> \[plugins."io.containerd.tracing.processor.v1.otlp"\]
> endpoint = ""
> insecure = false
> protocol = ""
> 
> \[proxy\_plugins\]
> 
> \[stream\_processors\]
> 
> \[stream\_processors."io.containerd.ocicrypt.decoder.v1.tar"\]
> accepts = \["application/vnd.oci.image.layer.v1.tar+encrypted"\]
> args = \["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"\]
> env = \["OCICRYPT\_KEYPROVIDER\_CONFIG=/etc/containerd/ocicrypt/ocicrypt\_keyprovider.conf"\]
> path = "ctd-decoder"
> returns = "application/vnd.oci.image.layer.v1.tar"
> 
> \[stream\_processors."io.containerd.ocicrypt.decoder.v1.tar.gzip"\]
> accepts = \["application/vnd.oci.image.layer.v1.tar+gzip+encrypted"\]
> args = \["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"\]
> env = \["OCICRYPT\_KEYPROVIDER\_CONFIG=/etc/containerd/ocicrypt/ocicrypt\_keyprovider.conf"\]
> path = "ctd-decoder"
> returns = "application/vnd.oci.image.layer.v1.tar+gzip"
> 
> \[timeouts\]
> "io.containerd.timeout.bolt.open" = "0s"
> "io.containerd.timeout.shim.cleanup" = "5s"
> "io.containerd.timeout.shim.load" = "5s"
> "io.containerd.timeout.shim.shutdown" = "3s"
> "io.containerd.timeout.task.state" = "2s"
> 
> \[ttrpc\]
> address = ""
> gid = 0
> uid = 0
> \`\`\`

Können Sie Ihre containerd / runc-Versionen überprüfen?

---

_[View the full topic](https://meta.discourse.org/t/cannot-use-launcher-enter-app/236323)._