operation not supported trying to create /dev/fd

[larsf]

Hi, I installed podman-5.2.5_2 and podman-suite-20241023 on FreeBSD 14.2-RELEASE and followed the instructions here:
https://podman.io/docs/installation#installing-on-freebsd-140

When I tried to run
podman run --rm docker.io/dougrabson/hello

it errors out with:
Error: OCI runtime error: ocijail: filesystem error: in create_directory: Operation not supported ["/var/db/containers/storage/zfs/graph/5c44eb630e2cd76eb1823fa3766f368ce6837764b7e9836ef683d96cf65f8ba5/dev/fd"]

So why is podman asking ocijail to create a directory in /dev ?

wondering if it is related to this code in podman:

config_freebsd.go has:
if st.IsDir() {
// For devfs, we need to add the directory as well
addDevice(g, resolvedDevicePath)

[mnour]

Hi @larsf,

I have tried the scenario that caused the issues on a fresh install for both FreeBSD 14.1-RELEASE-p6 and 14.2-RELEASE in both cases it worked like a charm

[mnour]

Hi @larsf,

I've tried other scenarios where Podman Storage cfg might be messed up:

• Configured to use ZFS while ZFS is not even configured or there is no ZFS dataset at the expected location
• Configured to use VFS while location is a ZFS dataset

All of course cause errors but none leads to the error you've reported.

Whenever you have time, would you please share a detailed reproduction path including:

• Initial state and configuration of your FreeBSD setup
• What steps are taken that lead to the errors you face

Thanks a lot in advance 👊

[larsf]

Hi @mnour
Thanks for verifying that it works on 14.2-RELEASE. This system has been upgraded multiple times - built from source, so it is likely that there is an older config/library somewhere that the culprit or something stupid I did. I'll spend some more time on this tomorrow.

[mnour]

Hey @larsf!

No problem at all 👊

[larsf]

@mnour The issue turned out to be an old devfs ruleset with the same number as the jail set in /etc/defaults/devfs.rules. It hid most devices, including /dev/fd. Does podman use a default devfs set (like the jail (4) one from /etc/defaults/devfs.rules or do we as users need to something like the ocijail alpline example run.sh script where we need to create a jailset to use before running (what would be the command line option for it) or does it simply use the highest devfs ruleset? The docs for podman installation probably need a small blurb about your devfs config to clarify

[mnour]

Hey @larsf,

This is actually a very good finding and might be even a bug. I will re-open the issue and do some more tests given your latest input to see if behaviour is reproducible.

Thanks a million @larsf 👊

[mnour]

FYI:

• create_directory fails dfr/ocijail#5