[GitHub] [camel-k] astefanutti edited a comment on issue #1580: Error during unshare(...): Operation not permitted

[GitBox <gi...@apache.org>]

astefanutti edited a comment on issue #1580:
URL: https://github.com/apache/camel-k/issues/1580#issuecomment-655514148


   Thanks, that confirms Buildah with the Docker container runtime is the problem.
   
   From containers/buildah#1901, it seems a system call, that's forbidden by default with the Docker container runtime, is still necessary when the user has no `CAP_SYS_ADMIN` in the container.
   
   The only option seems to change the Docker container runtime to use a different _seccomp_ profile, e.g. `docker run --security-opt seccomp=/usr/share/containers/seccomp.json`, but that requires being able to configure your cluster container runtime.
   
   A work-around is to use other builder strategy, like Kaniko or Spectrum, with `kamel install --build-publish-strategy=kaniko` or by editing your `IntegrationPlatform` directly.
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org