permission problems in debian:bullseye-20211011 image

[pie-ai]

starting the container using
docker run -it --entrypoint /bin/bash -u root debian:bullseye-20211011
works as expected.

The installation of software-properties-common was my source problem:
apt-get update && apt-get install software-properties-common -y

as it results in:

Creating config file /etc/apt/apt.conf.d/20auto-upgrades with new version
stat: cannot statx '/usr/share/unattended-upgrades/20auto-upgrades': Operation not permitted
dpkg: error processing package unattended-upgrades (--configure):
installed unattended-upgrades package post-installation script subprocess returned error exit status 1
Setting up python3-software-properties (0.96.20.2-2.1) ...
Setting up software-properties-common (0.96.20.2-2.1) ...
Processing triggers for libc-bin (2.31-13+deb11u2) ...
Processing triggers for ca-certificates (20210119) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
Processing triggers for dbus (1.12.20-2) ...
Errors were encountered while processing:
unattended-upgrades
E: Sub-process /usr/bin/dpkg returned an error code (1)

a very basic ls -la results in:

ls: cannot access 'lib': Operation not permitted
ls: cannot access 'usr': Operation not permitted
ls: cannot access 'tmp': Operation not permitted
ls: cannot access 'bin': Operation not permitted
ls: cannot access 'var': Operation not permitted
ls: cannot access 'sbin': Operation not permitted
ls: cannot access 'etc': Operation not permitted
ls: cannot access '..': Operation not permitted
ls: cannot access '.': Operation not permitted
ls: cannot access '.dockerenv': Operation not permitted
ls: cannot access 'dev': Operation not permitted
ls: cannot access 'sys': Operation not permitted
ls: cannot access 'srv': Operation not permitted
ls: cannot access 'boot': Operation not permitted
ls: cannot access 'run': Operation not permitted
ls: cannot access 'media': Operation not permitted
ls: cannot access 'proc': Operation not permitted
ls: cannot access 'opt': Operation not permitted
ls: cannot access 'root': Operation not permitted
ls: cannot access 'lib64': Operation not permitted
ls: cannot access 'home': Operation not permitted
ls: cannot access 'mnt': Operation not permitted
total 0
d????????? ? ? ? ? ? .
d????????? ? ? ? ? ? ..
-????????? ? ? ? ? ? .dockerenv
d????????? ? ? ? ? ? bin
d????????? ? ? ? ? ? boot
d????????? ? ? ? ? ? dev
d????????? ? ? ? ? ? etc
d????????? ? ? ? ? ? home
d????????? ? ? ? ? ? lib
d????????? ? ? ? ? ? lib64
d????????? ? ? ? ? ? media
d????????? ? ? ? ? ? mnt
d????????? ? ? ? ? ? opt
d????????? ? ? ? ? ? proc
d????????? ? ? ? ? ? root
d????????? ? ? ? ? ? run
d????????? ? ? ? ? ? sbin
d????????? ? ? ? ? ? srv
d????????? ? ? ? ? ? sys
d????????? ? ? ? ? ? tmp
d????????? ? ? ? ? ? usr
d????????? ? ? ? ? ? var

I do not know the source of the problem, in my case I used the jenkins/jenkins:lts image that bases on the debian image and the problems could be tracked back. Any suggestions or ideas?

[tianon]

You need to update docker, runc, and/or libseccomp on your host (this is a seccomp issue).

[pie-ai]

Thanks for the fast answer!