Seth Kenlon <skenlon@redhat.com> writes:

> Since Fedora 31, I can't seem to get a web server to install successfully into an image. I get failure with Nginx and Apache, and it "feels" like the failure is probably a
> post-install action because the RPM gets installed by dnf, it just ends in failure:
>
> ```
> $ buildah run centos-working-container-6 dnf install nginx -y
> Installed:
> [...]                                                             
>   nginx-all-modules-1:1.14.1-9.module_el8.0.0+184+e34fea82.noarch                                           
>   nginx-filesystem-1:1.14.1-9.module_el8.0.0+184+e34fea82.noarch                                               
>   nginx-mod-http-image-filter-1:1.14.1-9.module_el8.0.0+184+e34fea82.x86_64                           
>   nginx-mod-http-perl-1:1.14.1-9.module_el8.0.0+184+e34fea82.x86_64                                         
>   nginx-mod-http-xslt-filter-1:1.14.1-9.module_el8.0.0+184+e34fea82.x86_64                                 
>   nginx-mod-mail-1:1.14.1-9.module_el8.0.0+184+e34fea82.x86_64                                               
>   nginx-mod-stream-1:1.14.1-9.module_el8.0.0+184+e34fea82.x86_64                                           
> [...]
>
> Failed:
>   nginx-1:1.14.1-9.module_el8.0.0+184+e34fea82.x86_64                                                           
>
> Error: Transaction failed
> ```
>
> Installing pretty much anything else works:
>
> ```
> $ buildah run centos-working-container-6 dnf install lua -y
> [...]
> Installed:
>   lua-5.3.4-11.el8.x86_64                                                                                       
> Complete!
> ```
>
> I assume I've forgotten something "obvious" whilst setting up for rootless containers, or redirecting ports, or something of that nature?

I cannot reproduce locally.  Usually the post-install failures happen
because of fuse-overlayfs, or because a rootless user has not enough
privileges for some actions (e.g. chown'ing procfs).

What version of fuse-overlayfs are you using?

If you have the latest, please file a bug either in Podman or in Buildah
with a reproducer.  In the command above it is not clear how you got to
centos-working-container-6.

Thanks,
Giuseppe