try on sysbox runc

dockerfiles/pod_priv2.yaml

@@ -0,0 +1,38 @@
+apiVersion: v1
+kind: Pod
+metadata:
+  name: plural-cloud-priv2
+  namespace: sysbox
+  #annotations:
+  #  io.kubernetes.cri-o.userns-mode: "auto:size=65536"
+spec:
+  #runtimeClassName: sysbox-runc
+  containers:
+  - name: plural-cloud-priv2
+    image: ghcr.io/pluralsh/plural-cli-cloud:sha-0ea2f1a
+    resources:
+      requests:
+        memory: "256Mi"
+        cpu: "1m"
+    securityContext:
+      runAsUser: 1000
+      capabilities:
+        add:
+          - "SYS_ADMIN"
+          - "MKNOD"
+          - "SYS_CHROOT"
+          - "SETFCAP"
+      #allowPrivilegeEscalation: false
+    volumeMounts:
+      - name: containers-volume
+        mountPath: /var/lib/containers
+  volumes:
+    - name: containers-volume
+      hostPath:
+        path: /var/lib/containers
+  tolerations:
+  - key: plural.sh/sysbox
+    operator: Exists
+  - key: plural.sh/capacityType
+    operator: Exists
+  restartPolicy: Never

dockerfiles/pod_priv_sysbox.yaml → dockerfiles/pod_sysbox.yaml

@@ -1,23 +1,28 @@
 apiVersion: v1
 kind: Pod
 metadata:
-  name: plural-cloud-unpriv
+  name: plural-cloud-sysbox
   namespace: sysbox
   #annotations:
   #  io.kubernetes.cri-o.userns-mode: "auto:size=65536"
 spec:
   runtimeClassName: sysbox-runc
   containers:
-  - name: plural-cloud-unpriv
-    #image: ghcr.io/pluralsh/plural-cli-cloud:sha-fcf2725
-    image: ghcr.io/pluralsh/plural-cli-cloud:sha-791720e
-    #command: ["/sbin/init", "--log-level=err"]
+  - name: plural-cloud-sysbox
+    image: ghcr.io/pluralsh/plural-cli-cloud:sha-0ea2f1a
     resources:
       requests:
         memory: "256Mi"
         cpu: "1m"
     securityContext:
-      privileged: false
+      #runAsUser: 1000
+      capabilities:
+        add:
+          - "SYS_ADMIN"
+          #- "MKNOD"
+          - "SYS_CHROOT"
+          - "SETFCAP"
+      #allowPrivilegeEscalation: false
   tolerations:
   - key: plural.sh/sysbox
     operator: Exists