Some test/e2e podman volume tests fail with runc 1.3.0 #26938
Description
Issue Description
This runc change available in 1.3.0 makes the tests fail: opencontainers/runc#3990
Steps to reproduce the issue
make localintegration
Describe the results you received
https://openqa.opensuse.org/tests/5277891/file/podman_e2e-remoteintegration.txt
Failing tests:
Running: /usr/bin/podman --storage-opt overlay.imagestore=/tmp/podman-e2e-3709866078/imagecachedir --root /tmp/podman-e2e-3709866078/subtest-1450834488/p/root --runroot /tmp/podman-e2e-3709
866078/subtest-1450834488/p/runroot --runtime runc --conmon /usr/bin/conmon --network-config-dir /etc/containers/networks --network-backend netavark --cgroup-manager systemd --tmpdir /tmp/pod
man-e2e-3709866078/subtest-1450834488/p --events-backend file --db-backend sqlite --storage-driver overlay run --rm -v testvol3:/etc/apk:copy quay.io/libpod/alpine:latest stat -c %h /etc/apk/
arch
Error: OCI runtime error: runc: runc create failed: invalid mount &{Source:/tmp/podman-e2e-3709866078/subtest-1450834488/p/root/volumes/testvol3/_data Destination:/etc/apk Device:bind Flags
:20486 ClearedFlags:0 PropagationFlags:[278528] Data:copy Relabel: RecAttr:<nil> Extensions:0 IDMapping:<nil>}: bind mounts cannot have any filesystem-specific options applied
[FAILED] Command failed with exit status 126. See above for error message.
In [It] at: /root/podman/test/e2e/run_volume_test.go:452 @ 08/30/25 12:09:55.31
[It] podman run with --mount and named volume with driver-opts
/root/podman/test/e2e/run_volume_test.go:859
Timeline >>
> Enter [BeforeEach] TOP-LEVEL - /root/podman/test/e2e/common_test.go:117 @ 08/30/25 12:09:56.76
< Exit [BeforeEach] TOP-LEVEL - /root/podman/test/e2e/common_test.go:117 @ 08/30/25 12:09:56.761 (0s)
> Enter [It] podman run with --mount and named volume with driver-opts - /root/podman/test/e2e/run_volume_test.go:859 @ 08/30/25 12:09:56.761
Running: /usr/bin/podman --storage-opt overlay.imagestore=/tmp/podman-e2e-3709866078/imagecachedir --root /tmp/podman-e2e-3709866078/subtest-369483378/p/root --runroot /tmp/podman-e2e-37098
66078/subtest-369483378/p/runroot --runtime runc --conmon /usr/bin/conmon --network-config-dir /etc/containers/networks --network-backend netavark --cgroup-manager systemd --tmpdir /tmp/podma
n-e2e-3709866078/subtest-369483378/p --events-backend file --db-backend sqlite --storage-driver overlay run --rm --mount type=volume,source=test_vol,dst=/test,volume-opt=type=tmpfs,volume-opt
=device=tmpfs,volume-opt=o=nodev quay.io/libpod/alpine:latest echo hello
Error: OCI runtime error: runc: runc create failed: invalid mount &{Source:/tmp/podman-e2e-3709866078/subtest-369483378/p/root/volumes/test_vol/_data Destination:/test Device:bind Flags:204
86 ClearedFlags:0 PropagationFlags:[278528] Data:volume-opt=type=tmpfs,volume-opt=type=tmpfs,volume-opt=device=tmpfs,volume-opt=device=tmpfs,volume-opt=o=nodev,volume-opt=o=nodev Relabel: Rec
Attr:<nil> Extensions:0 IDMapping:<nil>}: bind mounts cannot have any filesystem-specific options applied
[FAILED] Command failed with exit status 126. See above for error message.
In [It] at: /root/podman/test/e2e/run_volume_test.go:864 @ 08/30/25 12:09:56.976
Describe the results you expected
Testsuite should not fail.
podman info output
host:
arch: amd64
buildahVersion: 1.41.3
cgroupControllers:
- cpuset
- cpu
- io
- memory
- hugetlb
- pids
- rdma
- misc
- dmem
cgroupManager: systemd
cgroupVersion: v2
conmon:
package: conmon-2.1.13-1.2.x86_64
path: /usr/bin/conmon
version: 'conmon version 2.1.13, commit: unknown'
cpuUtilization:
idlePercent: 26.62
systemPercent: 29.58
userPercent: 43.8
cpus: 2
databaseBackend: sqlite
distribution:
distribution: opensuse-tumbleweed
version: "20250829"
eventLogger: journald
freeLocks: 2048
hostname: susetest
idMappings:
gidmap: null
uidmap: null
kernel: 6.16.3-1-default
linkmode: dynamic
logDriver: journald
memFree: 3579056128
memTotal: 4107460608
networkBackend: netavark
networkBackendInfo:
backend: netavark
dns:
package: aardvark-dns-1.16.0-1.1.x86_64
path: /usr/libexec/podman/aardvark-dns
version: aardvark-dns 1.16.0
package: netavark-1.15.2-1.1.x86_64
path: /usr/libexec/podman/netavark
version: netavark 1.15.2
ociRuntime:
name: runc
package: runc-1.3.0-1.1.x86_64
path: /usr/bin/runc
version: |-
runc version 1.3.0
commit: v1.3.0-0-g4ca628d1d4c9
spec: 1.2.1
go: go1.24.2
libseccomp: 2.6.0
os: linux
pasta:
executable: /usr/bin/pasta
package: passt-20250611.0293c6f-3.2.x86_64
version: |
pasta 20250611.0293c6f-3.2
Copyright Red Hat
GNU General Public License, version 2 or later
<https://www.gnu.org/licenses/old-licenses/gpl-2.0.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
remoteSocket:
exists: true
path: /run/podman/podman.sock
rootlessNetworkCmd: pasta
security:
apparmorEnabled: false
capabilities: CAP_CHOWN,CAP_DAC_OVERRIDE,CAP_FOWNER,CAP_FSETID,CAP_KILL,CAP_NET_BIND_SERVICE,CAP_SETFCAP,CAP_SETGID,CAP_SETPCAP,CAP_SETUID,CAP_SYS_CHROOT
rootless: false
seccompEnabled: true
seccompProfilePath: /usr/share/containers/seccomp.json
selinuxEnabled: true
serviceIsRemote: false
slirp4netns:
executable: /usr/bin/slirp4netns
package: slirp4netns-1.3.3-1.1.x86_64
version: |-
slirp4netns version 1.3.3
commit: unknown
libslirp: 4.9.1
SLIRP_CONFIG_VERSION_MAX: 6
libseccomp: 2.6.0
swapFree: 2148507648
swapTotal: 2148507648
uptime: 0h 0m 13.00s
variant: ""
plugins:
authorization: null
log:
- k8s-file
- none
- passthrough
- journald
network:
- bridge
- macvlan
- ipvlan
volume:
- local
registries:
search:
- registry.opensuse.org
- registry.suse.com
- docker.io
store:
configFile: /usr/share/containers/storage.conf
containerStore:
number: 0
paused: 0
running: 0
stopped: 0
graphDriverName: overlay
graphOptions:
overlay.mountopt: nodev
graphRoot: /var/lib/containers/storage
graphRootAllocated: 30054285312
graphRootUsed: 3599192064
graphStatus:
Backing Filesystem: btrfs
Native Overlay Diff: "true"
Supports d_type: "true"
Supports shifting: "true"
Supports volatile: "true"
Using metacopy: "false"
imageCopyTmpDir: /var/tmp
imageStore:
number: 0
runRoot: /run/containers/storage
transientStore: false
volumePath: /var/lib/containers/storage/volumes
version:
APIVersion: 5.6.0
Built: 1755575526
BuiltTime: Mon Aug 18 23:52:06 2025
GitCommit: ""
GoVersion: go1.24.6
Os: linux
OsArch: linux/amd64
Version: 5.6.0Podman in a container
No
Privileged Or Rootless
None
Upstream Latest Release
Yes
Additional environment details
openSUSE Tumbleweed Build20250829
runc 1.3.0-1.1
Additional information
No response