I don’t know if this is the suitable place for this issue… please redirect me if not. I see a similar issue posted here earlier with no solution…
Hi, I have an Alpine Linux LXC running inside Armbian running on ARM64 SBC OrangePI Zero3 (that I intend to setup as a Forgejo Actions runner)… However I get the following error on Podman:
podman run --rm hello-world #run as root
WARN[0000] Failed to add conmon to cgroupfs sandbox cgroup: creating cgroup path /libpod_parent/conmon: enabling controller cpuset: write /sys/fs/cgroup/libpod_parent/cgroup.subtree_control: no such file or directory
Error: OCI runtime error: crun: controller `pids` is not available under /sys/fs/cgroup/libpod_parent/libpod-6cc322464f9fd2260dc1c596c83d22f5ab91d1d110da479247b255ffc4311ff2/cgroup.controllers
graphDriverName: overlay: I also tried vfs as mentioned in Alpine wiki.
On the host, this is the container config:
cat /var/lib/lxc/runner/config
# Template used to create this container: /usr/share/lxc/templates/lxc-download
# Parameters passed to the template: --dist alpine --release 3.21 --arch arm64
# For additional config options, please look at lxc.container.conf(5)
# Uncomment the following line to support nesting containers:
lxc.include = /usr/share/lxc/config/nesting.conf
# (Be aware this has security implications)
# Distribution configuration
lxc.include = /usr/share/lxc/config/common.conf
lxc.arch = linux64
# Container specific configuration
lxc.apparmor.profile = unconfined
lxc.apparmor.allow_nesting = 1
lxc.start.auto = 1
lxc.rootfs.path = dir:/var/lib/lxc/runner/rootfs
lxc.uts.name = runner
# Network configuration
lxc.net.0.type = veth
lxc.net.0.link = lxcbr0
lxc.net.0.flags = up
podman info
host:
arch: arm64
buildahVersion: 1.38.1
cgroupControllers:
- cpuset
- cpu
- io
- memory
- hugetlb
- pids
- rdma
cgroupManager: cgroupfs
cgroupVersion: v2
conmon:
package: conmon-2.1.12-r0
path: /usr/bin/conmon
version: 'conmon version 2.1.12, commit: unknown'
cpuUtilization:
idlePercent: 99.5
systemPercent: 0.21
userPercent: 0.29
cpus: 4
databaseBackend: sqlite
distribution:
distribution: alpine
version: 3.21.3
eventLogger: file
freeLocks: 2048
hostname: runner
idMappings:
gidmap: null
uidmap: null
kernel: 6.12.23-current-sunxi64
linkmode: dynamic
logDriver: k8s-file
memFree: 401338368
memTotal: 1018298368
networkBackend: netavark
networkBackendInfo:
backend: netavark
dns:
package: aardvark-dns-1.13.1-r1
path: /usr/libexec/podman/aardvark-dns
version: aardvark-dns 1.13.1
package: netavark-1.13.1-r0
path: /usr/libexec/podman/netavark
version: netavark 1.13.1
ociRuntime:
name: crun
package: crun-1.20-r0
path: /usr/bin/crun
version: |-
crun version 1.20
commit: 9c9a76ac11994701dd666c4f0b869ceffb599a66
rundir: /run/crun
spec: 1.0.0
+SELINUX +APPARMOR +CAP +SECCOMP +EBPF +YAJL
os: linux
pasta:
executable: /usr/bin/pasta
package: passt-2025.01.21-r0
version: |
pasta 2025_01_21.4f2c8e7
Copyright Red Hat
GNU General Public License, version 2 or later
<https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
remoteSocket:
exists: true
path: /run/podman/podman.sock
rootlessNetworkCmd: pasta
security:
apparmorEnabled: false
capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
rootless: false
seccompEnabled: true
seccompProfilePath: /etc/containers/seccomp.json
selinuxEnabled: false
serviceIsRemote: false
slirp4netns:
executable: ""
package: ""
version: ""
swapFree: 457269248
swapTotal: 509145088
uptime: 10h 41m 38.00s (Approximately 0.42 days)
variant: v8
plugins:
authorization: null
log:
- k8s-file
- none
- passthrough
network:
- bridge
- macvlan
- ipvlan
volume:
- local
registries:
search:
- docker.io
store:
configFile: /etc/containers/storage.conf
containerStore:
number: 0
paused: 0
running: 0
stopped: 0
graphDriverName: overlay
graphOptions:
overlay.mountopt: nodev
graphRoot: /var/lib/containers/storage
graphRootAllocated: 15477809152
graphRootUsed: 1566109696
graphStatus:
Backing Filesystem: extfs
Native Overlay Diff: "true"
Supports d_type: "true"
Supports shifting: "true"
Supports volatile: "true"
Using metacopy: "false"
imageCopyTmpDir: /var/tmp
imageStore:
number: 1
runRoot: /run/containers/storage
transientStore: false
volumePath: /var/lib/containers/storage/volumes
version:
APIVersion: 5.3.2
Built: 1746734537
BuiltTime: Thu May 8 20:02:17 2025
GitCommit: ""
GoVersion: go1.23.9
Os: linux
OsArch: linux/arm64
Version: 5.3.2