Loading modules with podman: error loading shared library operation not permitted

[connorkuehl]

I put the module's source code (palaver.cpp) into /znc-data/modules and it compiles:

$ podman logs irc-bouncer
Building modules ./palaver.cpp...
-- The CXX compiler identification is GNU 9.2.0
-- Check for working CXX compiler: /usr/bin/c++
-- Check for working CXX compiler: /usr/bin/c++ -- works
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Found ZNC 1.8.0
-- Configuring done
-- Generating done
-- Build files have been written to: /tmp/tmp7d4yjreb
Scanning dependencies of target module_palaver
[ 50%] Building CXX object CMakeFiles/module_palaver.dir/znc-data/modules/palaver.cpp.o
[100%] Linking CXX shared module palaver.so
[100%] Built target module_palaver
Checking for list of available modules...
Opening config [/znc-data/configs/znc.conf]...
Loading global module [webadmin]...
Loading global module [fail2ban]...
Binding to port [+36697] using ipv4...
Loading user [connor]
Loading network [freenode]
Loading network module [nickserv]...
Loading network module [simple_away]...
Adding 1 servers...
Loading network [oftc]
Loading network module [nickserv]...
Loading network module [simple_away]...
Adding 1 servers...
Loading user module [chansaver]...
Loading user module [controlpanel]...
Staying open for debugging [pid: 58]
ZNC 1.8.0 - https://znc.in

However when I go to load the modules:

Unable to load palaver: Unable to open module palaver: 
Error loading shared library /znc-data/modules/palaver.so: Operation not permitted

Host is Fedora 32 running podman version 1.9.1

Everything under /znc-data is owned by user znc and group znc

[DarthGandalf]

Can you show ls -l /znc-data/modules/ ?

[connorkuehl]

ls -l /znc-data/modules/

Sure!

# ls -l /znc-data/modules/
total 1308
-rw-rw-r--    1 znc      znc          33470 Apr  5 13:44 palaver.cpp
-r-xr-xr-x    1 znc      znc        1300488 May  6 01:38 palaver.so

[DarthGandalf]

I can't make podman work at all: Error: container_linux.go:349: starting container process caused "process_linux.go:449: container init caused \"rootfs_linux.go:58: mounting \\\"cgroup\\\" to rootfs \\\"/var/lib/containers/storage/overlay/8d599b9af9761a6ee2af2391d98dbb473d4ef988fa896efe3c253b276f54cb4b/mer ged\\\" at \\\"/sys/fs/cgroup\\\" caused \\\"invalid argument\\\"\"": OCI runtime error

Works fine for me in docker.