Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

k3s-rootless.service not starting up #11900

Closed
flixman opened this issue Mar 7, 2025 · 1 comment
Closed

k3s-rootless.service not starting up #11900

flixman opened this issue Mar 7, 2025 · 1 comment

Comments

@flixman
Copy link

flixman commented Mar 7, 2025

Environmental Info:
K3s Version:
k3s version v1.32.0+k3s1 (cca8fac)
go version go1.23.3

Node(s) CPU architecture, OS, and Version:
Linux ubuntu 6.8.0-55-generic #57-Ubuntu SMP PREEMPT_DYNAMIC Wed Feb 12 23:42:21 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux

Cluster Configuration:
1 master

Describe the bug:
Starting the k3s-rootless service results in the message "failed to start the child: fork/exec /proc/self/exe: operation not permitted"

Steps To Reproduce:

  • Installed K3s: as root user, executed "curl -sfL https://get.k3s.io | sh - > master_setup.log"
  • Enabled lingering and delegation for the user
  • Downloaded the file k3s-rootless.service to user systemd/user folder
  • reload the systemd daemon, and started the service

Expected behavior:
k3s gets started running as an unprivileged user

Actual behavior:
k3s refuses to start

Additional context / logs:

@brandond
Copy link
Member

brandond commented Mar 7, 2025

I am unable to reproduce this. Rootless is also working correctly in our CI tests.

I suspect you have selinux or some other security module in place. Check the audit logs and figure out what is preventing this process from forking/re-execing.

@brandond brandond closed this as completed Mar 7, 2025
@github-project-automation github-project-automation bot moved this from New to Done Issue in K3s Development Mar 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: Done Issue
Development

No branches or pull requests

2 participants