img command in docker containers, is it supported?

[rroller]

It's unclear to from the documentation if I should be able to run img pull and other commands inside a docker container. Is it supported at this point?

On raw linux hosts it works fine. But installing img inside a container and running doesn't. I see

INFO[0001] apply failure, attempting cleanup             error="failed to extract layer sha256:df64d3292fd6194b7865d7326af5255db6d81e9df29f48adde61a918fbd8c332: failed to unmount /tmp/containerd-mount567834531: operation not permitted: failed to mount /tmp/containerd-mount567834531: operation not permitted" key="extract-388613784-ogNh sha256:df64d3292fd6194b7865d7326af5255db6d81e9df29f48adde61a918fbd8c332"
failed to extract layer sha256:df64d3292fd6194b7865d7326af5255db6d81e9df29f48adde61a918fbd8c332: failed to unmount /tmp/containerd-mount567834531: operation not permitted: failed to mount /tmp/containerd-mount567834531: operation not permitted

I've tried this on Docker with Mac and Docker on a Debian linux machine.

Thanks

[jessfraz]

would you like to make a PR to the docs, it's not supported as stated here: https://github.com/genuinetools/img/blob/master/README.md#running-with-docker

unsure how to make more clear :)

[rroller]

Got it. I thought I read something contradicting to that in an issue and wasn't sure if the readme was out of date (but now I can't find the issue). Thanks for confirming.

[jessfraz]

well it works as privileged :) just not without the privileged flag :) I will clarify

…

On Wed, Sep 19, 2018 at 4:26 PM Ronnie ***@***.***> wrote: Closed #159 <#159>. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#159 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ABYNbC6EdVrnpO-NpZJXVHuXCrBTZpUJks5ucqiJgaJpZM4Ww5GT> .

-- Jessie Frazelle 4096R / D4C4 DD60 0D66 F65A 8EFC 511E 18F3 685C 0022 BFF3 pgp.mit.edu <http://pgp.mit.edu/pks/lookup?op=get&search=0x18F3685C0022BFF3>

[rroller]

Thanks again. It looks like docker/cli#1347 is the last remaining blocking issue to get unprivileged to work. I'll follow along there.