创建用户命名空间失败

Question

我在 docker 映像中安装了奇异性和 nextflow，我想使用以下命令启动奇异性 pcm 映像：

nextflow pcm.nf --allow-setuid --in example/example_proteome.faa --out result -w work/ -with-singularity pcm_202010.img

请我不明白这个错误。

感谢您的帮助

 N E X T F L O W  ~  version 21.10.6
    Launching `pcm.nf` [jolly_joliot] - revision: 3402118766
    executor >  local (1)
    [68/112863] process > convert_names (1)          [  0%] 0 of 1
    [-        ] process > index_query                -
    executor >  local (1)
    [68/112863] process > convert_names (1)          [100%] 1 of 1, failed: 1 ✘
    [-        ] process > index_query                -
    Project : /opt/progs/pcm
    Cmd line: nextflow pcm.nf --allow-setuid --in example/example_proteome.faa --out result -w work/ -with-singularity pcm_202010.img
    Oops .. something went wrong
    Error executing process > 'convert_names (1)'
    
    Caused by:
      Process `convert_names (1)` terminated with an error exit status (255)
    
    Command executed:
    
      convert_names.py -i example_proteome.faa -o conv_name.fasta -a association.tsv
    
    Command exit status:
      255
    
    Command output:
      (empty)
    
    Command error:
      INFO:    Converting SIF file to temporary sandbox...
      FATAL:   while extracting /opt/progs/pcm/./pcm_202010.img: root filesystem extraction failed: extract command failed: ERROR  : Failed to create user namespace: not allowed to create user namespace
      : exit status 1
    
    Work dir:
      /opt/progs/pcm/work/68/112863a3adddbb02900a892952162d
    
    Tip: you can try to figure out what's wrong by changing to the process work dir and showing the script file named `.command.sh`

Answer 1

为了能够从 Docker 容器内部运行 Singularity，您必须在启动时使用 --privileged 标志。

参考： https://docs.docker.com /engine/reference/run/#runtime-privilege-and-linux-功能