Skip to content

Conversation

@ekzhang
Copy link
Contributor

@ekzhang ekzhang commented Jul 10, 2025

See #11910 for details — this potentially fixes a divergence between gVisor and runc behavior where having the cwd of the OCI container spec set to a symlink to a folder causes gVisor to exit with this error:

running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory

I'm not sure if this is the best way to fix the issue, just sending in the PR in case it helps!

@avagin avagin self-assigned this Jul 10, 2025
@avagin
Copy link
Collaborator

avagin commented Jul 10, 2025

thanks for the fix. Could you wrap the commit message at 80 chars.

@ekzhang
Copy link
Contributor Author

ekzhang commented Jul 10, 2025

Yes, can do! Thanks for this. Also let me know if you have guidance on how to write a test for this behavior!

@ekzhang
Copy link
Contributor Author

ekzhang commented Jul 10, 2025

Just wrapped the commit message, thanks!

copybara-service bot pushed a commit that referenced this pull request Jul 10, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 57017a5
PiperOrigin-RevId: 781612832
@avagin
Copy link
Collaborator

avagin commented Jul 11, 2025

@ekzhang
Copy link
Contributor Author

ekzhang commented Jul 11, 2025

Got it, yeah I see I should fix this test, will do that — but is the general approach correct or would you want it to be adjusted?

file creation paths can't follow final symlink

@avagin
Copy link
Collaborator

avagin commented Jul 11, 2025

but is the general approach correct

yes, it is correct.

copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3bd7a45
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3bd7a45
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3bd7a45
PiperOrigin-RevId: 781612832
See google#11910 for details — this potentially fixes a divergence between
gVisor and runc behavior where having the `cwd` of the OCI container
spec set to a symlink to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container:
starting sandbox: failed to create process working directory
"/cwd-folder-name-here": not a directory
```
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 11, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 12, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 12, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 12, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 13, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 13, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 13, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 781612832
copybara-service bot pushed a commit that referenced this pull request Jul 14, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

Fixes #11910

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 783024019
copybara-service bot pushed a commit that referenced this pull request Jul 14, 2025
See #11910 for details — this potentially fixes a divergence between gVisor and
runc behavior where having the `cwd` of the OCI container spec set to a symlink
to a folder causes gVisor to exit with this error:

```
running container: starting container: starting root container: starting sandbox: failed to create process working directory "/cwd-folder-name-here": not a directory
```

Fixes #11910

FUTURE_COPYBARA_INTEGRATE_REVIEW=#11911 from ekzhang:patch-1 3f7bca1
PiperOrigin-RevId: 783024019
@copybara-service copybara-service bot merged commit b3dff6b into google:master Jul 14, 2025
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants