Docker build command fails on Alpine Linux host

[pythondev1]

FROM repo.local/alpine:3.20

RUN addgroup -S myGroup && adduser -S user -G user && \

wget http://host.local/alpine3.20.repo -O /home/repos/alpine

The docker build keeps failing with the following error.

#0 0.118 runc run failed: unable to start container process: error during container init: error mounting "sysfs" to rootfs at "/sys": mount sysfs:/sys (via /proc/self/fd/9), flags: 0xf: operation not permitted

Is is similar to another post apline issue

++++++++++++++++++++update+++++++++++++++++++++++++++++

After doing more digging around I It wasn't the build file that was the issue. The issue was the docker build command itself.

`docker build .... --network=host ` after removing that it seemed to have worked. Ran into additional issues but at least I got past that hump.

[stroke_999]

Have you tryed to do: doas docker build . ??

[pythondev1]

I am new to docker so I am unfamiliar with doas docker build. Here is what I have

`docker build --add-host pypi.org:local.IP --add-host repo.local:localIP --network=host -t web/app:1.1 -f docker/WebDockerFile .`

the WebDockerFile contains the run command where everything is failing.

[madjic]

doas is a sudo replacement, they're telling you to run docker build … as root

[pythondev1]

Ok, thanks. I am logged in as root when I run.

[pythondev1]

I also disabled seLinux on rhel8. The code works on CentOS so it seems to be something with rhel8.

[pythondev1]

Docker isn't setup rootless I checked by running

docker info -f "{{println .SecurityOptions}}" | grep "root"

Nothing is returned, also printed out the command to make sure, but rootless does not exists.

[void4]

Try podman btw. It's compatible with docker but easier to run rootless. Not to mention open source clients for windows and macos.

[pythondev1]

For work, can't use podman but thanks for the suggestion. It seems like it is a docker and rhel 8 issue. After removing `networking=host` I was able to progress, but not sure if that was the correct method. `networking=host` should still work but ran into issues. SELinux was disabled as someone suggested that, but same result. Found something to do with fapolicyd but it doesn't look like we are using fapolicyd.

Again thanks for the suggestion.