Cant drop privileges for downloading as file /var/cache/apt/archives/partial/

I have the same issue. Did you find a solution for it? I just removed userns-remap to make it work. But was not quite happy with it as it is not solution. May have something to do with the security option no-new-privileges. See my post below for more details. Add a comment. Active Oldest Votes. TL;DR: try to rebuild the image. That helped in my case. Improve this answer. We run into the same issue with rootless podman. Balazs Zachar Balazs Zachar 11 1 1 bronze badge.

This may be why you would see the following error messages: E: setgroups failed - setgroups 1: Operation not permitted E: setegid failed - setegid 1: Operation not permitted E: seteuid failed - seteuid 1: Operation not permitted E: setgroups 0 failed - setgroups 1: Operation not permitted I found an article that talks about it with examples clearly: Running Docker application containers more securely.

My current thoughts: I don't call the failed "apt-get update" an "issue" or a "problem" because that should be an intentional behavior for security consideration.

In other words, it's a good thing. Because the quoted kernel doc says "Once the bit is set, it I don't think removing no-new-privileges is the right solution. At least it's not right before you fully discuss it with your team. Asked 4 years, 9 months ago. Active 4 years, 9 months ago. Viewed 8k times. Improve this question. This is just a W arning, so it is not necessarily a problem.

Did everything else work fine? The question needs more detail. Add a comment. I just encountered this issue today. Oddly enough vagrant 1. Upgraded vagrant and reinstalled vagrant plugins and the issue was resolved. Skip to content. Star 1. New issue. Jump to bottom. Copy link. I have a very basic cachier setup on a virtualbox based image.

I fixed this by adding the bellow to my config c. The configuration currently vagrant 1. Reading database Preparing to unpack Processing triggers for fontconfig 2. Processing triggers for update-notifier-common 3. This is no longer the case, but they are still available from third parties. You are free to download these fonts and use them for your own use, but you may not redistribute them in modified form, including changes to the file name or packaging format.

DLL All done, no errors. EXE extracting fontinst. TTF extracting Arialbd. TTF extracting Arialbi. TTF extracting Arial. TTF All done, no errors. TTF extracting Comic. TTF extracting fontinst.

TTF extracting Georgiab. TTF extracting Georgiai. TTF extracting Georgia. TTF extracting Timesbd. TTF extracting Timesbi. TTF extracting Timesi. EXE All done, no errors. EXE extracting trebuc. TTF extracting Verdanai. TTF extracting Verdanaz. TTF extracting Verdana. TXT All done, no errors. All fonts downloaded and installed.