Падает джоба хотя уже была собрана на соседнем namespace, куда

капать?

│ │ Copying blob sha256:2fa066caddb8f09a71082b03aa43046f79346a01d9c89e06a1f508bb1207dba5
427
│ │ Copying blob sha256:7de349943ba1ad9b8ee9606fd286319673851392125e934585f734a3e53942d8
428
│ │ Copying blob sha256:15a5292eeb429d711a34fd0a83a781eb29645d74bca40a12cdb6e004e77e568c
429
│ │ Copying blob sha256:cd5023d334bf4405f86f9acf1077ac3b21aa516f68506ff59ce30abd3936fec0
430
│ │ Copying blob sha256:9aeec8d616183626b41ecf5b10ed88a874979ec92d2f9aa1bc5b0ff6398879e0
431
│ └ Fetching stage apiapp/RUN37 from cr.yandex/crp6iqpcb9uq94nded/be (7.40 seconds) FAILED
432
└ ⛵ image apiapp (22.43 seconds) FAILED
433
Running time 31.23 seconds
434
Error: phase build on image apiapp stage COPY handler failed: unable to fetch stage 6584dffe5d7608a10cdc1e163cdb80922fdd8aa36123b8227c653968-1719229466980 from stages storage cr.yandex/crp6iqpcb9uq94nded/be: unable to fetch stage 6584dffe5d7608a10cdc1e163cdb80922fdd8aa36123b8227c653968-1719229466980 image cr.yandex/crp6iqpcb9uq94nded/be:6584dffe5d7608a10cdc1e163cdb80922fdd8aa36123b8227c653968-1719229466980: unable to pull image cr.yandex/crp6iqpcb9uq94nded/be:6584dffe5d7608a10cdc1e163cdb80922fdd8aa36123b8227c653968-1719229466980: error pulling image "cr.yandex/crp6iqpcb9uq94nded/be:6584dffe5d7608a10cdc1e163cdb80922fdd8aa36123b8227c653968-1719229466980": writing blob: adding layer with blob "sha256:ab328c8e3c49d521a9c7850148c3b526ebbab9777906a56bbbbbc306028f56db": processing tar file(potentially insufficient UIDs or GIDs available in user namespace (requested 0:42 for /etc/gshadow): Check /etc/subuid and /etc/subgid if configured locally and run "podman system migrate": lchown /etc/gshadow: invalid argument): exit status 1

435
Cleaning up project directory and file based variables
00:01
436
ERROR: Job failed: exit status 1

Собираете в контейнере? Buildah включен?

да в контейнере, Buildah включен(WERF_BUILDAH_MODE: auto), еще есть WERF_STAGED_DOCKERFILE_VERSION: v2 и staged: true

А образ сами собирали или используете наш registry.werf.io/werf/werf:2-stable?

image: name: "registry.werf.io/werf/werf:2-stable" pull_policy: always

Можете прямо перед вызовом werf build/converge вызвать это: stat /etc/subuid stat /etc/subgid cat /etc/subuid cat /etc/subgid id

получилось File: /etc/subuid Size: 533 Blocks: 8 IO Block: 4096 regular file Device: fc02h/64514d Inode: 131681 Links: 1 Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2024-06-26 01:13:08.592847562 +0000 Modify: 2023-12-25 14:06:02.856211297 +0000 Change: 2023-12-25 14:06:02.856211297 +0000 Birth: 2023-02-02 10:29:03.011999760 +0000 File: /etc/subgid Size: 533 Blocks: 8 IO Block: 4096 regular file Device: fc02h/64514d Inode: 132117 Links: 1 Access: (0644/-rw-r--r--) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2024-06-26 01:13:08.592847562 +0000 Modify: 2023-12-25 14:06:02.864211257 +0000 Change: 2023-12-25 14:06:02.864211257 +0000 Birth: 2023-02-02 10:29:03.059999760 +0000 iworks:100000:65536 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 iworks:100000:65536 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 gitlab-runner:100001:65537 uid=998(gitlab-runner) gid=998(gitlab-runner) groups=998(gitlab-runner),999(docker) time="2024-06-26T16:09:08Z" level=warning msg="running newgidmap: exit status 1: newgidmap: write to gid_map failed: Invalid argument\n" time="2024-06-26T16:09:08Z" level=warning msg="/usr/bin/newgidmap should be setgid or have filecaps setgid" time="2024-06-26T16:09:08Z" level=warning msg="Falling back to single mapping" time="2024-06-26T16:09:08Z" level=warning msg="Error running newuidmap: exit status 1: newuidmap: write to uid_map failed: Invalid argument\n" time="2024-06-26T16:09:08Z" level=warning msg="Falling back to single mapping" Version: v1.2.315 Using project dir: /home/gitlab-runner/builds/g8Qj8nhdE/0/backend/roz_events Using werf config render file: /tmp/werf-config-render-769109847 и дальше пошлу собираться и упала