AWS-ROSA Cluster EFS runtime error

0

Hello, I am encountering an issue with container creation in an environment where we're leveraging the AWS Pod Identity Webhook for accessing Amazon Elastic File System (EFS) on ROSA cluster. Inside the AWS CLI image ( containers: - image: amazon/aws-cli) pod, we can successfully execute the following command: aws efs describe-file-systems however when we try to mount a volume to the pod using the same Service account , I get this error:

Error: container create failed: time="2024-04-01T18:56:07Z" level=error msg="runc create failed: unable to start container process: error during container init: error creating device nodes: mknod /var/lib/containers/storage/overlay/XXXXXXXX/merged/dev/null: errno 524"

Any insights into resolving this error would highly be appreciated .

Thank you in advance

AS-374
asked a month ago75 views
1 Answer
1

The error suggests that the container runtime is unable to create device nodes inside the container's file system. This is likely due to a permission issue or a security restriction within the container runtime or the underlying host operating system.

Possible Causes:

  1. Permissions: The container runtime might not have sufficient permissions to create device nodes within the container's file system.

This can happen if the container runtime is running with limited privileges or if the file system permissions are too restrictive.

  1. Security Policies: Some security policies or kernel configurations may prevent the creation of device nodes within containers. For example, certain SELinux policies or AppArmor profiles could be blocking this operation.

  2. Overlayfs Limitations: The error message mentions the overlay file system, which is a union file system commonly used in container runtimes.

There might be a limitation or a bug in the overlayfs implementation that prevents the creation of device nodes in certain scenarios.


Understanding these possible causes puts you in a position to effectively address and resolve the issue by adjusting permissions, modifying security policies, or troubleshooting the overlay filesystem's limitations.

profile picture
EXPERT
answered a month ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions