CI: verify stage fails

[ltalirz]

The role runs through fine on CI, but when creating a new app at the verify stage

ansible-dokku/molecule/default/verify.yml

Lines 43 to 46 in b40149b

	# Testing dokku_app
	- name: create example-app
	dokku_app:
	app: example-app

we get the error:

error during container init: error reopening /dev/null inside container: open /dev/null: operation not permitted: unknown.\\n ! 

Full context:

  TASK [clone example-app] *******************************************************
  fatal: [instance]: FAILED! => {"changed": false, "meta": {"error": "b'-----> Cloning example-app from https://github.com/heroku/node-js-getting-started#b10a4d7a20a6bbe49655769c526a2b424e0e5d0b\\n\\x1b[1G-----> Cleaning up...\\n\\x1b[1G-----> Building example-app from herokuish\\ndocker: Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error reopening /dev/null inside container: open /dev/null: operation not permitted: unknown.\\n !     Failure extracting app code\\n !     Removing invalid image tag dokku/example-app:latest\\n !     App build failed\\n'", "present": true}, "msg": "b'-----> Cloning example-app from https://github.com/heroku/node-js-getting-started#b10a4d7a20a6bbe49655769c526a2b424e0e5d0b\\n\\x1b[1G-----> Cleaning up...\\n\\x1b[1G-----> Building example-app from herokuish\\ndocker: Error response from daemon: failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: error reopening /dev/null inside container: open /dev/null: operation not permitted: unknown.\\n !     Failure extracting app code\\n !     Removing invalid image tag dokku/example-app:latest\\n !     App build failed\\n'"}

It seems to me like dokku_app makes an assumption about the docker setup that is currently not fulfilled in the docker environment created by molecule?

@josegonzalez have you seen this before?

[ltalirz]

Possibly related: opencontainers/runc#2204 , fixed by opencontainers/runc#2391 for cgroups v1, but

A similar issue affects the cgroupv2 devices setup, but that is a topic for another time (as the solution is drastically different).

[josegonzalez]

No, seems weird. Sounds like a docker issue?

[Niicck]

Alright, I think I got all the CI bugs worked out.