Arch Linux User Repository

Hi, I maintain a working package here: https://aur.archlinux.org/packages/docker-sbx

According to the AUR submission guidelines, packages should not include a -bin suffix if the source is not available.

According to the same guidelines, I should not have submitted a duplicate package.

But since this package was broken from the first upload and there hasn't been any interest in fixing it - would you consider dropping this one, @MH0386?

Hi everyone, I've created a Git repository with a working PKGBUILD. I can't publish it on the AUR because it would violate the rules regarding duplicate content. I'm using my package locally and I've included a script for installation.

To the author: feel free to use my PKGBUILD to update yours.

link to repo : https://codeberg.org/basluc/docker-sbx-bin

Sigh, all, a bit too much noise from AI driven investigations here.

Please list package names for missing dependencies, not just binaries.

These 2 are missing (needed to start sbx): erofs-utils & libkrun

Nerdbox doesn't yet have a package: https://github.com/containerd/nerdbox

Confirming the missing /usr/libexec tree reported by vnoel and grmhay. The package currently ships only /usr/bin/sbx; the upstream Ubuntu .deb also installs:

/usr/libexec/containerd-shim-nerdbox-v1
/usr/libexec/lib/libkrun.so
/usr/libexec/mkfs.erofs
/usr/libexec/nerdbox-initrd-x86_64
/usr/libexec/nerdbox-kernel-x86_64

/usr/bin/sbx resolves these via a path relative to itself (the string "getting absolute path to ../libexec/lib" is in the binary), so they must live under /usr/libexec alongside /usr/bin.

Without them, sandboxd cannot launch a microVM via libkrun and falls back to mounting an ext4 rwlayer on the host, which needs CAP_SYS_ADMIN and fails as:

mount failed {ext4 .../rwlayer.img [rw loop noinit_itable]}:
... fstype: ext4, ..., err: operation not permitted

Suggested fix: have the PKGBUILD extract the matching-version .deb from https://download.docker.com/linux/ubuntu/dists/noble/pool/stable/amd64/ and install the /usr/libexec tree in addition to the CLI. Verified locally on 0.24.2 — copying those files out of the .deb makes sbx work correctly. Also worth adding erofs-utils to depends, or using the bundled /usr/libexec/mkfs.erofs.

Debugged and documented using Claude, but tested by a human :-)

Hi. Appreciate the package and some have commented about missing dependencies. I have found that if you can add the following package dependencies to this package, it will install and run fine.

• sbx (the binary)
• containerd-shim-nerdbox-v1
• libkrun.so ← microVM runtime
• nerdbox-kernel-x86_64 + nerdbox-initrd-x86_64
• mkfs.erofs
• apparmor-profile

Also, could you consider including the nerdbox shim present in the tar?

Or maybe the best would be to rely on the .deb to get the proper files in the right place? not sure :)

Hi, the dependency erofs-utils (at least) is missing :)