• 已编辑

操作系统信息
虚拟机(1台node)+物理机(一台node,一台master),Ubuntu24.04,4C/16G

Kubernetes版本信息
kubectl version 命令执行结果贴在下方

Client Version: v1.31.2

Kustomize Version: v5.4.2

Server Version: v1.31.2

容器运行时
docker version / crictl version / nerdctl version 结果贴在下方

RuntimeName: containerd

RuntimeVersion: v1.7.13

RuntimeApiVersion: v1

KubeSphere版本信息

v4.1.2 离线安装,使用kk安装

问题是什么
devops流水线中执行镜像build提示如下

+ podman build -t questionnaire-manager:latest -f Dockerfile .
Error: mount /var/lib/containers/storage/overlay:/var/lib/containers/storage/overlay, flags: 0x1000: permission denied
script returned exit code 125

流水线配置

pipeline {
   agent {
    kubernetes {
      inheritFrom 'nodejs base'
      containerTemplate {
        name 'nodejs'
        image 'node:23.3.0-alpine'
      }

    }
  }
  stages {
    stage('Clone repository') {
      agent none
      steps {
        git(url: 'http://192.168.1.89/questionnaire/questionnaire_manager.git', credentialsId: 'gitlab', branch: 'deploy', changelog: true, poll: false)
      }
    }

    stage('Run npm install') {
      agent none
      steps {
        container('nodejs') {
          sh 'npm config set registry https://registry.npmmirror.com/'
          sh 'node -v'
          sh 'npm install'
        }

      }
    }

    stage('Run build') {
      steps {
        container('nodejs') {
          sh 'npm run build:dev'
        }

      }
    }

    stage('Docker build') {
      agent none
      steps {
        container('base') {
          sh 'ls'
          sh 'pwd'
          sh 'podman build -t questionnaire-manager:latest -f Dockerfile  .'
        }

      }
    }

  }
}

流水线使用docker命令也不行,提示差不多

+ docker version
Error: mount /var/lib/containers/storage/overlay:/var/lib/containers/storage/overlay, flags: 0x1000: permission denied
script returned exit code 125

kubectl -n kubesphere-devops-system edit cm jenkins-casc-config 将所有pod template添加 privileged: true ,然后重启 devops-jenkins。

                  ttyEnabled: true
                  privileged: true  <==============
                  resourceRequestCpu: "100m"
                  resourceLimitCpu: "4000m"