← Back to issue list

`run-user` does not work properly without `services`

View original Github issue

Metadata

Project
rockcraft
Number
#461
Type
issue
State
closed
Author
rebornplusplus
Labels
—
Created
Updated
Closed

Current evaluation

Resolved by commit 72c1af5d (PR #473), which corrected Pebble's runtime directory permissions for non-root rocks without services.

Resolution: closed resolved

Reason: The matching fix is merged in PR #473 as commit 72c1af5d, making Pebble's default runtime directory writable by _daemon_. The reporter had linked the symptom to the broader _daemon_ permission issue in canonical/rockcraft#447.

Evaluated by: mr-cal-bot

No scores available.

Issue body

### Bug Description I am building a rock with the `run-user: _daemon_` specified and without any services. The build is successful, but when I try to run the rock with docker, there is no response in the console. It's not like the terminal is freezing, there are simply no pebble logs or anything. But if I have a service under services (it was commented out in the rockcraft.yaml), the image is working as expected. ### To Reproduce 1. Build the rock ``` rockcraft pack -v ``` 2. Load it into docker-daemon. ``` skopeo copy oci-archive:hello_latest_amd64.rock docker-daemon:hello:latest ``` 3. Run with docker ``` docker run hello ``` At this point, there is no response on the console. No logs. ### Environment rockcraft version: 1.1.1 Using LXD OS: Ubuntu 22.04 LTS ### rockcraft.yaml ```shell name: hello title: Hello World summary: An Hello World rock description: | This is just an example of a Rockcraft project for a Hello World rock. version: latest license: Apache-2.0 base: ubuntu@22.04 run-user: _daemon_ # services: # hello: # override: replace # startup: enabled # command: /usr/bin/hello -t platforms: amd64: parts: hello: plugin: nil stage-packages: - hello ``` ### Relevant log output ```shell https://pastebin.com/vvYdvrAA ```

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Resolved by commit 72c1af5d (PR #473), which corrected Pebble's runtime directory permissions for non-root rocks without services.
stealth/space-bunny-alpha — closed resolved Fixed by merged PR #473 (commit 72c1af5d), making /var/lib/pebble/default mode 0777 so run-user _daemon_ works without services.
stealth/space-bunny-alpha — closed stale Closed without a documented fix. PR #473, commit 72c1af5d, later made /var/lib/pebble/default writable (mode 1777), addressing the daemon permission failure.
stealth/space-bunny-alpha — closed stale Closed without a code fix or documented resolution; its only follow-up linked the _daemon_ permissions discussion in #447, which remains open.
stealth/space-bunny-alpha — closed stale Closed without a documented fix; the last comment linked the silent container to _daemon_ user permissions in canonical/rockcraft#447, which remains open.
qwen/qwen3.6-35b-a3b — — Closed without a direct fix. The reporter linked the silent execution to a _daemon_ permission issue tracked in #447, indicating this report was superseded or closed as a duplicate of that upstream tracking issue.
qwen/qwen3.6-35b-a3b — — Closed without a direct fix. The author noted the behavior likely stems from daemon permission issues tracked in issue 447, indicating the report was closed as a duplicate or superseded by that issue.
qwen/qwen3.6-35b-a3b — — Closed as a duplicate of #447. The issue reported silent container failures when using run-user: _daemon_ without services. It was superseded by broader daemon user permission fixes tracked in #447.
qwen3.6-35b-a3b-mtp-q6 — — Closed as a duplicate or superseded by issue #447. The reported run-user failure without services is linked to daemon user permission handling tracked in that referenced issue.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/rockcraft#447 (confidence 100%)

    The reporter explicitly linked the silent startup to this open _daemon_ permission issue.

  • Likely Fixed By: canonical/rockcraft#473 (confidence 98%)

    Commit 72c1af5d fixes Pebble directory permissions for non-root runtime execution.

Related issues

No related issues found above the similarity threshold.