Starting docker containers failing with "mount through procfd: operation not permitted"

[adi-g15]

Bug description

When starting a container through the terminal, it fails with:

docker: Error response from daemon: OCI runtime create failed: container_linux.go:380: starting container process caused: process_linux.go:545: container init caused: rootfs_linux.go:76: mounting "proc" to rootfs at "/proc" caused: mount through procfd: operation not permitted: unknown.

Steps to reproduce

1. Open gitpod with any repo, eg. https://gitpod.io/#https://github.com/adi-g15/zeeve-learnings
2. docker run -it ubuntu

I tried with multiple images, all failed with same error, including archlinux, custom images, hyperledger sawtooth

Expected behavior

No response

Example repository

No response

Anything else?

Didn't find a duplicate, maybe related to #5090

This wasn't a problem few days ago. Also, another friend had this same error, maybe more people may face this.

[pawlean]

I also see this issue, and someone else pointed it out on our community page.

[csweichel]

The workspace contains runc in version 1.0.1 which breaks right now. We have a fix on main (#5139) but it's not deployed yet. This should happen by the end of today (CEST timezone).

[ghuntley]

Resolved and in production.

[ChristianHuff-DEV]

@ghuntley is the resolution rolled out incremental?

I'm still encountering this issue on "ws-eu15". On "ws-eu16" it works. (Repo for reproduction: https://github.com/ChristianHuff-DEV/gitpod-4573)

[Menzorg]

Indeed. We have problem with 15, but cant recreate our repo in 16 - all times it creates on 15.

[ivansglazunov]

Resolved and in production.

Not resolved. Every time eu15, and every time error.

[csweichel]

/schedule

[roboquat]

@csweichel: Cannot schedule issue - issue does not belong to a team. Use /team to specify one.

In response to this:

/schedule

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[csweichel]

/team workspace

[csweichel]

/schedule

[roboquat]

@csweichel: Issue scheduled in the workspace team (WIP: 0)

In response to this:

/schedule

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[csweichel]

/assign