DevHeads.net

Docker and user namespaces on F30

Hi,

I just updated to F30 and my docker setup with user namespaces doesn't
work anymore. When I try to run:
docker run -it --rm docker.io/php:7-fpm-alpine sh
I get this error:
docker: Error response from daemon: OCI runtime create failed:
container_linux.go:348: starting container process caused
"process_linux.go:402: container init caused \"rootfs_linux.go:58:
mounting \\\"mqueue\\\" to rootfs
\\\"/var/lib/docker/1000.1001/btrfs/subvolumes/38ce5c87e31bbbcec010db85
383d1af57e8652ff4e4c411cebe0c2102a36a020\\\" at \\\"/dev/mqueue\\\"
caused \\\"operation not permitted\\\"\"": unknown.

I tried to disable SELinux with setenforce 0 but got the same result.

However, dk run --userns=host -it --rm docker.io/php:7-fpm-alpine sh
works fine. So it seems to be limited to user namespaces.

My kernel: 5.0.9-301.fc30.x86_64

Any ideas on where this may come from? This worked fine on F29 (and
probably on older versions too, I have this setup for a while now).

Regards,