Podman in toolbox hangs on Fedora 31 Beta

[evelineraine]

Description

Running podman info in freshly created (except dnf install) fedora-toolbox:31 container on Fedora Workstation 31 Beta hangs indefinitely.

Rationale

Even though rootless podman-in-podman is not supported, being able to list and inspect images / containers from inside the toolbox is a very convenient feature.

Steps to reproduce

$ fedora toolbox create
$ fedora toolbox enter
toolbox$ dnf install -y podman
toolbox$ podman info

Analysis

Processes:

toolbox$ ps -ef
...
eveline+    8703    6735  2 22:29 pts/3    00:00:00 podman info
eveline+    8712    8703  0 22:29 pts/3    00:00:00 [podman] <defunct>

System call trace:

$ strace -p 8703
strace: Process 8703 attached
futex(0x558d6f71f9e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
... (x20)
futex(0x558d6f71f9e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
futex(0x558d6f712d20, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x558d6f71f9e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
epoll_pwait(4, [], 128, 0, NULL, 140732692937960) = 0
futex(0x558d6f712d30, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc0003664c8, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x558d6f712d48, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000}) = -1 EAGAIN (Resource temporarily unavailable)
futex(0x558d6f71f9e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
futex(0x558d6f71f9e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
futex(0x558d6f71f9e8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable)
futex(0x558d6f712d48, FUTEX_WAKE_PRIVATE, 1) = 1
nanosleep({tv_sec=0, tv_nsec=3000}, NULL) = 0
futex(0x558d6f71f9e8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
...

Environment

Fact	Value
Hypervisor	VirtualBox 6.0.14 r133895
OS	Fedora 31 (Workstation Edition)
Kernel	5.3.7-301.fc31.x86_64
Host podman	1.6.2-2.fc31
Toolbox podman	1.6.2-2.fc31
Image	f31/fedora-toolbox:31-7
Image VCS	2823d72c9792be6c6cc0ae82d70c3f8f7d33f871

---

Host podman info:

host:
  BuildahVersion: 1.11.3
  CgroupVersion: v2
  Conmon:
    package: conmon-2.0.1-1.fc31.x86_64
    path: /usr/bin/conmon
    version: 'conmon version 2.0.1, commit: 5e0eadedda9508810235ab878174dca1183f4013'
  Distribution:
    distribution: fedora
    version: "31"
  IDMappings:
    gidmap:
    - container_id: 0
      host_id: 2505
      size: 1
    - container_id: 1
      host_id: 100000
      size: 65536
    uidmap:
    - container_id: 0
      host_id: 2505
      size: 1
    - container_id: 1
      host_id: 100000
      size: 65536
  MemFree: 188526592
  MemTotal: 3137253376
  OCIRuntime:
    name: crun
    package: crun-0.10.2-1.fc31.x86_64
    path: /usr/bin/crun
    version: |-
      crun version 0.10.2
      spec: 1.0.0
      +SYSTEMD +SELINUX +APPARMOR +CAP +SECCOMP +EBPF +YAJL
  SwapFree: 0
  SwapTotal: 0
  arch: amd64
  cpus: 2
  eventlogger: journald
  hostname: fossil.raine.ai
  kernel: 5.3.7-301.fc31.x86_64
  os: linux
  rootless: true
  slirp4netns:
    Executable: /usr/bin/slirp4netns
    Package: slirp4netns-0.4.0-20.1.dev.gitbbd6f25.fc31.x86_64
    Version: |-
      slirp4netns version 0.4.0-beta.3+dev
      commit: bbd6f25c70d5db2a1cd3bfb0416a8db99a75ed7e
  uptime: 3h 13m 37.99s (Approximately 0.12 days)
registries:
  blocked: null
  insecure: null
  search:
  - docker.io
  - registry.fedoraproject.org
  - quay.io
  - registry.access.redhat.com
  - registry.centos.org
store:
  ConfigFile: /home/evelineraine/.config/containers/storage.conf
  ContainerStore:
    number: 0
  GraphDriverName: overlay
  GraphOptions:
    overlay.mount_program:
      Executable: /usr/bin/fuse-overlayfs
      Package: fuse-overlayfs-0.6.5-2.fc31.x86_64
      Version: |-
        fusermount3 version: 3.6.2
        fuse-overlayfs: version 0.6.5
        FUSE library version 3.6.2
        using FUSE kernel interface version 7.29
  GraphRoot: /home/evelineraine/.local/share/containers/storage
  GraphStatus:
    Backing Filesystem: btrfs
    Native Overlay Diff: "false"
    Supports d_type: "true"
    Using metacopy: "false"
  ImageStore:
    number: 0
  RunRoot: /run/user/2505
  VolumePath: /home/evelineraine/.local/share/containers/storage/volumes

---

Toolbox container info: inspect.txt

[debarshiray]

Currently, you can only use toolbox commands inside Toolbox containers.

There's a plan to extend that to a few other commands like podman, flatpak, rpm-ostree, etc. in the near future.

[evelineraine]

Ah, I see. Then I'm looking forward a lot to have this implemented.

Still, would be nice to have a hacky way to make this work ahead of time. Like --extra-args to be passed to podman on container creation. I believe #100 was working on this kind of feature, but I see it became a bit stale.

Thanks!