Issue on CRI-O image pull in lxd container

LXD
1

I install CRI-O in lxd container. But when i pull the image it showing an error

FATA[0030] pulling image: rpc error: code = Unknown desc = Error committing the finished image: error adding layer with blob “sha256:6eda6749503f60eb69077e148cba1015ec5808b0c1c2e6f027f7d1b960f6a3a9”: Error processing tar file(exit status 1): operation not permitted

2

It’s kinda hard to tell what the exact issue is here but you may want to try setting:

  • security.syscalls.intercept.mknod=true
  • security.syscalls.intercept.setxattr=true

Which if your kernel supports it should allow more special files to be created within containers (without significant security risks).