ApplyLayer stdout: stderr: remount /, flags: 0x44000: permission denied exit status 1" Error: creating build container:

[shay1197]

HI,
I am having error running in a rootless container (ubuntu 22.04) in kubernetes ( podman build)

• podman build --storage-driver=vfs --no-cache -t blabla.bla:48444/jenkins-agent:3336-jdk17 --tls-verify=false .
  [1/12] STEP 1/13: FROM jenkins/inbound-agent:3256.v88a_f6e922152-4-jdk17 AS base
  Resolving "jenkins/inbound-agent" using unqualified-search registries (/etc/containers/registries.conf)
  Trying to pull docker.io/jenkins/inbound-agent:3256.v88a_f6e922152-4-jdk17...
  Getting image source signatures
  Copying blob sha256:c10e49e2ae751d7e0a95fd985d4baf869ddf847c9dff496af287618d9f4a402d
  Copying blob sha256:d3915ffa03dd97aeff52883276bf9048d5f45fee6f5c274df6877acac5d35abb
  Copying blob sha256:a445b84e64466cf2b1855021971fe4554a302b17009a8df7ae676501e4bb59e0
  Copying blob sha256:55867a3b2a3b8dad7b0d2be7659ca4b6e9c6785587ec479ab8b39da364b706d4
  Copying blob sha256:f11c1adaa26e078479ccdd45312ea3b88476441b91be0ec898a7e07bfd05badc
  Copying blob sha256:142683d3f5578ae8156707f6c20be3ceb67e1b9f2ae3bb725b9448c193c38dae
  Copying blob sha256:ab94afba5451bb12f89c75da5ccc33b3ad9238fe9646651f4ae2a412564dba07
  Copying blob sha256:4f4fb700ef54461cfa02571ae0db9a0dc1e0cdb5577484a6d75e68dc38e8acc1
  Copying blob sha256:7af6470caf99a63d368b81ca0645a1ea3379ce4e40831453b81967c086dd4842
  Copying blob sha256:2828fce91c7c2fcc8e3a77d4186e31468e20efac6ddbd287ab67576b6fc5df70
  time="2024-10-17T23:50:23Z" level=error msg="While applying layer: ApplyLayer stdout: stderr: remount /, flags: 0x44000: permission denied exit status 1"
  Error: creating build container: copying system image from manifest list: writing blob: adding layer with blob "sha256:f11c1adaa26e078479ccdd45312ea3b88476441b91be0ec898a7e07bfd05badc"/""/"sha256:32148f9f6c5aadfa167ee7b146b9703c59307049d68b090c19db019fd15c5406": ApplyLayer stdout: stderr: remount /, flags: 0x44000: permission denied exit status 1

adding podman info-

• podman info
  host:
  arch: amd64
  buildahVersion: 1.37.4
  cgroupControllers:
  • cpuset
  • cpu
  • io
  • memory
  • hugetlb
  • pids
  • rdma
  • misc
    cgroupManager: cgroupfs
    cgroupVersion: v2
    conmon:
    package: conmon_2.1.12-1_amd64
    path: /usr/bin/conmon
    version: 'conmon version 2.1.12, commit: unknown'
    cpuUtilization:
    idlePercent: 96.97
    systemPercent: 0.84
    userPercent: 2.19
    cpus: 4
    databaseBackend: sqlite
    distribution:
    codename: trixie
    distribution: debian
    version: unknown
    eventLogger: file
    freeLocks: 2048
    hostname: jenkins-agent-mqxt1
    idMappings:
    gidmap:
    • container_id: 0
      host_id: 1000
      size: 1
    • container_id: 1
      host_id: 100000
      size: 65536
      uidmap:
    • container_id: 0
      host_id: 1000
      size: 1
    • container_id: 1
      host_id: 100000
      size: 65536
      kernel: 5.15.0-91-generic
      linkmode: dynamic
      logDriver: k8s-file
      memFree: 363827200
      memTotal: 16766251008
      networkBackend: netavark
      networkBackendInfo:
      backend: netavark
      dns:
      package: Unknown
      package: netavark_1.4.0-3_amd64
      path: /usr/lib/podman/netavark
      version: netavark 1.4.0
      ociRuntime:
      name: crun
      package: crun_1.17-1_amd64
      path: /usr/bin/crun
      version: |-
      crun version 1.17
      commit: 000fa0d4eeed8938301f3bcf8206405315bc1017
      rundir: /tmp/storage-run-1000/crun
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +WASM:wasmedge +YAJL
      os: linux
      pasta:
      executable: ""
      package: ""
      version: ""
      remoteSocket:
      exists: false
      path: /tmp/storage-run-1000/podman/podman.sock
      rootlessNetworkCmd: pasta
      security:
      apparmorEnabled: false
      capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
      rootless: true
      seccompEnabled: true
      seccompProfilePath: /usr/share/containers/seccomp.json
      selinuxEnabled: false
      serviceIsRemote: false
      slirp4netns:
      executable: /usr/bin/slirp4netns
      package: slirp4netns_1.2.0-1_amd64
      version: |-
      slirp4netns version 1.2.0
      commit: 656041d45cfca7a4176f6b7eed9e4fe6c11e8383
      libslirp: 4.7.0
      SLIRP_CONFIG_VERSION_MAX: 4
      libseccomp: 2.5.4
      swapFree: 0
      swapTotal: 0
      uptime: 42h 9m 42.00s (Approximately 1.75 days)
      variant: ""
      plugins:
      authorization: null
      log:
  • k8s-file
  • none
  • passthrough
  • journald
    network:
  • bridge
  • macvlan
  • ipvlan
    volume:
  • local
    registries:
    search:
  • docker.io
    store:
    configFile: /home/jenkins/.config/containers/storage.conf
    containerStore:
    number: 0
    paused: 0
    running: 0
    stopped: 0
    graphDriverName: vfs
    graphOptions: {}
    graphRoot: /home/jenkins/.local/share/containers/storage
    graphRootAllocated: 98743734272
    graphRootUsed: 58775232512
    graphStatus: {}
    imageCopyTmpDir: /var/tmp
    imageStore:
    number: 0
    runRoot: /tmp/storage-run-1000/containers
    transientStore: false
    volumePath: /home/jenkins/.local/share/containers/storage/volumes
    version:
    APIVersion: 5.2.4
    Built: 1729158387
    BuiltTime: Thu Oct 17 09:46:27 2024
    GitCommit: ""
    GoVersion: go1.23.2
    Os: linux
    OsArch: linux/amd64
    Version: 5.2.4

Thanks in advanced