Image: v1.21.0-k3s1 fails when running in a container

[iwilltry42]

Environmental Info:
K3s Version:

k3s version v1.21.0+k3s1 (2705431)
go version go1.16.2

via k3d v4.4.3

Node(s) CPU architecture, OS, and Version:

OpenSUSE Tumbleweed

Cluster Configuration:

Single-Node cluster using k3d cluster create

Describe the bug:

Containerd fails to create containers

failed to create containerd task: OCI runtime create failed: container_linux.go:380:
          starting container process caused: apply caps: operation not permitted:
          unknown

References

• First catched by @ibuildthecloud
• Similar issue in kind: [master] kube-proxy doesn't start up due to "apply caps: operation not permitted" error kubernetes-sigs/kind#2058
  • underlying problem fixed in containerd by @AkihiroSuda: oci.WithPrivileged: set the current caps, not the known caps containerd/containerd#5017 (released in v1.5.0-beta.2)
  • fixed in kind by updating the deps: Upgrade base deps kubernetes-sigs/kind#2084

I guess this would require an update of https://github.com/k3s-io/containerd in the end 🤔
@AkihiroSuda do you have some more input on this issue maybe?

[davidnuzik]

Assigned to @iwilltry42 for checking if this is resolved in k3s 1.21.1 - if so please close this issue.

[iwilltry42]

@davidnuzik , I just gave it a try on that same test system without any issues 👍
Thanks for the fix guys!