[lxc-users] Mounting fuse in a container - most recent instructions don't seem to work

[Christian Brauner]

On Sat, Jun 23, 2018 at 11:19:17PM +1000, Tony Lewis wrote:
> I am trying to use FUSE in a container, namely bup.  I get the following
> error:
> 
> fusermount: mount failed: Operation not permitted
> 
> The most recent instructions for this seem to be at
> http://blog.forshee.me/2016/02/container-mounts-in-ubuntu-1604.html, and
> seem to include:
> 
> |echo Y | sudo tee /sys/module/fuse/parameters/userns_mounts|
> 
> But when I run this on the host I get:
> 
> tee: /sys/module/fuse/parameters/userns_mounts: Permission denied
> 
> What should I do to be able to get FUSE running in an unprivileged
> container?
> 
> More info:
> 
> Host is Debian Stretch, 4.9.0-6-amd64 #1 SMP Debian 4.9.88-1+deb9u1
> (2018-05-07) x86_64 GNU/Linux

This is currently a Ubuntu specific patch. It will be available upstream
starting with kernel 4.18.

Christian

> 
> LXC and LXC are both at version 3.1, via snap
> 
> The /dev/fuse node exists in the guest:
> 
> crw-rw-rw- 1 nobody nogroup 10, 229 May 23 11:54 /dev/fuse
> 
> In the parameters directory on the host I have:
> 
> ls -la /sys/module/fuse/parameters/
> total 0
> drwxr-xr-x 2 root root    0 Jun 23 22:58 .
> drwxr-xr-x 6 root root    0 Jun 23 22:58 ..
> -rw-r--r-- 1 root root 4096 Jun 23 22:58 max_user_bgreq
> -rw-r--r-- 1 root root 4096 Jun 23 22:58 max_user_congthresh
> 
> 
> 
> 

> _______________________________________________
> lxc-users mailing list
> lxc-users at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-users