Visitar URL original
Ubuntu use fuse with generic-device-plugin Permission denied · Issue #80 · squat/generic-device-plugin · GitHub
Skip to content

Ubuntu use fuse with generic-device-plugin Permission denied #80

Open

Description

@ppancake

Hi, We're using the generic-device-plugin for /dev/fuse in Kubernetes with the following pod configuration:

      securityContext:
        capabilities:
          add:
            - SYS_ADMIN
      resources:
        limits:
          miks.io/fuse: 1

This setup works properly on CentOS nodes, but we're encountering permission denied errors on Ubuntu nodes. I suspect this might be related to AppArmor security policies. How can we resolve this while maintaining security best practices?

Activity

  1. mueckinger commented on Sep 28, 2025

    @mueckinger

    I suspect this might be related to AppArmor security policies.

    Your assumption is correct. This works on Ubuntu based nodes:

          securityContext:
            appArmorProfile:
              type: Unconfined
            capabilities:
              add:
                - SYS_ADMIN
    
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions