opam init -a issue in docker

[argent-smith]

Hi, I've got this error when trying to build a dockerized opam installation:

[ERROR] The compilation of ocaml-base-compiler failed at "/home/dev/.opam/opam-init/hooks/sandbox.sh build ./configure -prefix /home/dev/.opam/default -with-debug-runtime".

#=== ERROR while compiling ocaml-base-compiler.4.07.0 =========================#
# context              2.0.0 | linux/arm64 |  | https://opam.ocaml.org/2.0#815ad398
# path                 ~/.opam/default/.opam-switch/build/ocaml-base-compiler.4.07.0
# command              ~/.opam/opam-init/hooks/sandbox.sh build ./configure -prefix /home/dev/.opam/default -with-debug-runtime
# exit-code            1
# env-file             /tmp/opam-xxx-6/ocaml-base-compiler-6-0325cb.env
# output-file          /tmp/opam-xxx-6/ocaml-base-compiler-6-0325cb.out
### output ###
# capset failed: Operation not permitted

How can this be fixed?

[avsm]

You need to either disable opam sandboxing in the Docker image (opam init --disable-sandboxing), or run the Docker container with docker run --privileged in order to allow the container to create its own namespaces.

[argent-smith]

👍 Thanks!

[lattice0]

How I'm gonna use the opam to do opam init --disable-sandboxing if opam itself is installed by the script on which this error occurs?

[argent-smith]

@avsm It's not in the container. It's in a regular Mac CLI.

[argent-smith]

Sorry, wrong issue. Closing.

[rjbou]

@argent-smith Out of curiosity, why sandboxing wasn't working on your mac ? MacOs sandbox script uses the integrated sandbox-exec

[argent-smith]

@rjbou that's exactly why I've opened #4153: I have no idea ). Also, I found yet another OPAM + fish glitch. Yesterday night was such a surprise time )