[GH-ISSUE #1930] docker run "ls: /opt/s3fs/bucket: Permission denied" #971

Closed
opened 2026-03-04 01:50:19 +03:00 by kerem · 3 comments
Owner

Originally created by @pljplj on GitHub (Apr 6, 2022).
Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1930

Additional Information

The following information is very important in order to help us to help you. Omission of the following details may delay your support request or receive no attention at all.
Keep in mind that the commands we provide to retrieve information are oriented to GNU/Linux Distributions, so you could need to use others if you use s3fs on macOS or BSD

Version of s3fs being used (s3fs --version)

/opt/s3fs # s3fs --version
Amazon Simple Storage Service File System V1.86 (commit:bb20fc3) with OpenSSL
Copyright (C) 2010 Randy Rizun rrizun@gmail.com
License GPL2: GNU GPL version 2 https://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Version of fuse being used (pkg-config --modversion fuse, rpm -qi fuse, dpkg -s fuse)

_/opt/s3fs # pkg-config --modversion fuse, rpm -qi fuse, dpkg -s fuse
/bin/sh: pkg-config: not found

Kernel information (uname -r)

5.13.0-1021-aws

GNU/Linux Distribution, if applicable (cat /etc/os-release)

NAME="Alpine Linux"
ID=alpine
VERSION_ID=3.12.0
PRETTY_NAME="Alpine Linux v3.12"
HOME_URL="https://alpinelinux.org/"
BUG_REPORT_URL="https://bugs.alpinelinux.org/"

s3fs command line used, if applicable

/etc/fstab entry, if applicable

dev/cdrom /media/cdrom iso9660 noauto,ro 0 0
/dev/usbdisk /media/usb vfat noauto,ro 0 0

s3fs syslog messages (grep s3fs /var/log/syslog, journalctl | grep s3fs, or s3fs outputs)

There is no file /var/log/syslog in the container

Details about issue

On an ec2 instance I did:
$ docker pull efrecon/s3fs

Then I did:
$ docker run -it --rm
--device /dev/fuse
--cap-add SYS_ADMIN
--security-opt "apparmor=unconfined"
--env "AWS_S3_BUCKET=picard-prov"
--env "AWS_S3_ACCESS_KEY_ID=obscured"
--env "AWS_S3_SECRET_ACCESS_KEY=obscured"
--env UID=$(id -u)
--env GID=$(id -g)
-v /mnt/tmp:/opt/s3fs/bucket:rshared
efrecon/s3fs

The result was:
ls: /opt/s3fs/bucket: Permission denied
Mounted bucket picard-prov onto /opt/s3fs/bucket

When I sh into the container /opt/s3fs/bucket is empty despite the s3 bucket not being empty

Originally created by @pljplj on GitHub (Apr 6, 2022). Original GitHub issue: https://github.com/s3fs-fuse/s3fs-fuse/issues/1930 ### Additional Information _The following information is very important in order to help us to help you. Omission of the following details may delay your support request or receive no attention at all._ _Keep in mind that the commands we provide to retrieve information are oriented to GNU/Linux Distributions, so you could need to use others if you use s3fs on macOS or BSD_ #### Version of s3fs being used (s3fs --version) /opt/s3fs # s3fs --version Amazon Simple Storage Service File System V1.86 (commit:bb20fc3) with OpenSSL Copyright (C) 2010 Randy Rizun <rrizun@gmail.com> License GPL2: GNU GPL version 2 <https://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. #### Version of fuse being used (pkg-config --modversion fuse, rpm -qi fuse, dpkg -s fuse) _/opt/s3fs # pkg-config --modversion fuse, rpm -qi fuse, dpkg -s fuse /bin/sh: pkg-config: not found #### Kernel information (uname -r) 5.13.0-1021-aws #### GNU/Linux Distribution, if applicable (cat /etc/os-release) NAME="Alpine Linux" ID=alpine VERSION_ID=3.12.0 PRETTY_NAME="Alpine Linux v3.12" HOME_URL="https://alpinelinux.org/" BUG_REPORT_URL="https://bugs.alpinelinux.org/" #### s3fs command line used, if applicable ``` ``` #### /etc/fstab entry, if applicable dev/cdrom /media/cdrom iso9660 noauto,ro 0 0 /dev/usbdisk /media/usb vfat noauto,ro 0 0 #### s3fs syslog messages (grep s3fs /var/log/syslog, journalctl | grep s3fs, or s3fs outputs) There is no file /var/log/syslog in the container ### Details about issue On an ec2 instance I did: $ docker pull efrecon/s3fs Then I did: $ docker run -it --rm \ --device /dev/fuse \ --cap-add SYS_ADMIN \ --security-opt "apparmor=unconfined" \ --env "AWS_S3_BUCKET=picard-prov" \ --env "AWS_S3_ACCESS_KEY_ID=obscured" \ --env "AWS_S3_SECRET_ACCESS_KEY=obscured" \ --env UID=$(id -u) \ --env GID=$(id -g) \ -v /mnt/tmp:/opt/s3fs/bucket:rshared \ efrecon/s3fs The result was: ls: /opt/s3fs/bucket: Permission denied Mounted bucket picard-prov onto /opt/s3fs/bucket When I sh into the container /opt/s3fs/bucket is empty despite the s3 bucket not being empty
kerem closed this issue 2026-03-04 01:50:19 +03:00
Author
Owner

@rcfox commented on GitHub (May 11, 2022):

Try using efrecon/s3fs:1.91. The base name is a fairly old version.

<!-- gh-comment-id:1124325439 --> @rcfox commented on GitHub (May 11, 2022): Try using `efrecon/s3fs:1.91`. The base name is a fairly old version.
Author
Owner

@gaul commented on GitHub (Jun 12, 2022):

Please reopen if symptoms persist with 1.91.

<!-- gh-comment-id:1153166606 --> @gaul commented on GitHub (Jun 12, 2022): Please reopen if symptoms persist with 1.91.
Author
Owner

@TDenisM commented on GitHub (Jul 6, 2022):

Hi! It's still here

/opt/s3fs # ls
ls: ./bucket: Permission denied
passwd-s3fs

ARG S3FS_VERSION=v1.91

UPDATE: Sorry - no - my fault - it's ok.

<!-- gh-comment-id:1176103687 --> @TDenisM commented on GitHub (Jul 6, 2022): Hi! It's still here ``` /opt/s3fs # ls ls: ./bucket: Permission denied passwd-s3fs ``` ARG S3FS_VERSION=v1.91 UPDATE: Sorry - no - my fault - it's ok.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/s3fs-fuse#971
No description provided.