[DNM] ci/cirrus: run rootless tests on CentOS 7

[kolyshkin]

Investigating #2473 (#2473 (comment))

[kolyshkin]

As I suspected, the reason is SELinux.

type=PROCTITLE msg=audit(10/12/2023 01:04:59.696:1547) : proctitle=/home/runc/tests/integration/../../runc init

type=SYSCALL msg=audit(10/12/2023 01:04:59.696:1547) : arch=x86_64 syscall=write success=no exit=EACCES(Permission denied) a0=0x9 a1=0x55d702e5abb8 a2=0x0 a3=0x0 items=0 ppid=1193 pid=1204 auid=root uid=rootless gid=rootless euid=rootless suid=rootless fsuid=rootless egid=rootless sgid=rootless fsgid=rootless tty=(none) ses=62 comm=runc:[2:INIT] exe=/home/runc/runc subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)

type=AVC msg=audit(10/12/2023 01:04:59.696:1547) : avc: denied { create } for pid=1204 comm=runc:[2:INIT] scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=key permissive=0

Let's see if we can fix this.

[kolyshkin]

Even with the selinux fixups, it does not work. I guess some kernel patches that enables rootless cgroup is missing from the CentOS 7 kernel.

Opened #4279 instead.