Skip to content

Fix: early exit in container runtime if not running rootful #113

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sgopinath1 merged 1 commit into from
Apr 10, 2026
+10 −0
Merged

Fix: early exit in container runtime if not running rootful #113

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions cmd/container-runtime/main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,12 @@ import (

func main() {
logger.Init(false)

if os.Getuid() != 0 {
slog.Error("Rootless mode is not supported")
os.Exit(1)
}

slog.Info("Creating ROCm container runtime", "args", os.Args)

rt, err := runtime.New(os.Args)
Expand Down
4 changes: 4 additions & 0 deletions docs/container-runtime/requirements.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,9 @@ Docker Compatibility
.. note::
**Docker Desktop on Linux:** Docker Desktop on Linux is not supported for GPU workloads. See the :doc:`troubleshooting` guide for details.

.. important::
**Rootless mode is not supported.** The AMD Container Runtime must be run as root. Rootless container runtimes are not supported and will result in a runtime error.

ROCm and Driver Compatibility
-----------------------------
- ROCm 6.4.1 or newer is required to view and verify partitioned GPUs inside containers.
Expand Down Expand Up @@ -55,6 +58,7 @@ GPU Partitioning Requirements
Important Notes
----------------

- **Rootless mode is not supported.** The AMD Container Runtime requires root privileges. Running the runtime as a non-root user will fail immediately with an error.
- ROCm must be installed on the host system and must match the expected version compatibility with your container images.
- Using mismatched amdgpu driver and runtime versions may result in runtime errors or undefined behavior.
- Ensure CDI specs are kept up to date in environments where GPU topology can change frequently (e.g., partitioned systems or multi-GPU deployments).
Expand Down
Loading