--run-tmpdir & Docker: still getting [PYI-1:ERROR] Could not create temporary directory!

[lambdina]

Hi,
I am trying to build a scanner with the help of a Dockerfile and a launcher script written in Python.
Here is the Dockerfile:

FROM python:3.10-slim-bullseye AS builder

# Install necessary packages and create a non-root user
RUN apt-get update && apt-get install -y --no-install-recommends \
    build-essential \
    wget \
    gcc \
    libffi-dev \
    && rm -rf /var/lib/apt/lists/*

WORKDIR /cs-enum
COPY ./scripts /cs-enum/scripts/

# Installing tools to process input files
# Compiling Python scripts into binary to make it faster :p
RUN pip install --no-cache-dir -r /cs-enum/scripts/requirements.txt && \
    pip install pyinstaller && \
    mkdir /cs-enum/scripts/tmp && \
    pyinstaller --clean --onefile /cs-enum/scripts/launcher.py \
    --paths=./scripts/utils/ \
     --runtime-tmpdir=/cs-enum/scripts/tmp && \
    cp /cs-enum/dist/launcher /cs-enum/ && chmod +x launcher

COPY . .

FROM scratch AS production

COPY --from=builder /cs-enum/launcher /cs-enum/
COPY --from=builder /cs-enum/results/ /cs-enum/
COPY --from=builder /cs-enum/scripts/ /cs-enum/

USER 65535:65535

ENTRYPOINT ["/cs-enum/launcher"]
CMD ["-f", "./dataset/tls_targets.json", "-o", "./results"]```

I also use Docker Compose to use host FileSystem and host network:

```yaml
services:
  csenum:
    build:
      context: .
    container_name: csenum_container
    volumes:
      - /srv/csenum/data:/data
      - ./results:/cs-enum/results
    network_mode: "host"  # Uses the host network stack directly

When building with docker compose up --build, I get this :

[+] Building 35.2s (14/14) FINISHED                                                                                                                                                             docker:default
 => [csenum internal] load build definition from Dockerfile                                                                                                                                               0.0s
 => => transferring dockerfile: 1.94kB                                                                                                                                                                    0.0s
 => [csenum internal] load metadata for docker.io/library/python:3.10-slim-bullseye                                                                                                                       1.4s
 => [csenum internal] load .dockerignore                                                                                                                                                                  0.0s
 => => transferring context: 2B                                                                                                                                                                           0.0s
 => [csenum 1/8] FROM docker.io/library/python:3.10-slim-bullseye@sha256:1c431318d515243d0ac20cfc812021b8e44d3d1a380d199fba41351b0710c89d                                                                 2.7s
 => => resolve docker.io/library/python:3.10-slim-bullseye@sha256:1c431318d515243d0ac20cfc812021b8e44d3d1a380d199fba41351b0710c89d                                                                        0.0s
 => => sha256:55ab1b300d4b4b00c98fb396b36f0f7ba5dab2f7d18927e3742d364632723cbe 31.45MB / 31.45MB                                                                                                          0.7s
 => => sha256:3e16a91ea067a0d5f1f9979fa45bbe50a2a321862a8dd3018d2cff05d2c88c27 871.32kB / 871.32kB                                                                                                        0.4s
 => => sha256:4592c11ebf5642c31fba0a4165001b66739c50401c0102448853c1999f1b352d 14.84MB / 14.84MB                                                                                                          0.5s
 => => sha256:1c431318d515243d0ac20cfc812021b8e44d3d1a380d199fba41351b0710c89d 5.26kB / 5.26kB                                                                                                            0.0s
 => => sha256:5eaba96a987b36d7f29d47129133bc96fad6784ba8360a0bf28c080cff7082ab 1.75kB / 1.75kB                                                                                                            0.0s
 => => sha256:026515d5114b5d0c0603fe971a6335940d44ec84817dd806eb97cd591b014ab3 5.43kB / 5.43kB                                                                                                            0.0s
 => => sha256:bf2fb192f7134a2a3b7a72401082dc63965c4ecfa32d7817f4665df32cbbd32d 250B / 250B                                                                                                                0.5s
 => => extracting sha256:55ab1b300d4b4b00c98fb396b36f0f7ba5dab2f7d18927e3742d364632723cbe                                                                                                                 1.1s
 => => extracting sha256:3e16a91ea067a0d5f1f9979fa45bbe50a2a321862a8dd3018d2cff05d2c88c27                                                                                                                 0.1s
 => => extracting sha256:4592c11ebf5642c31fba0a4165001b66739c50401c0102448853c1999f1b352d                                                                                                                 0.5s
 => => extracting sha256:bf2fb192f7134a2a3b7a72401082dc63965c4ecfa32d7817f4665df32cbbd32d                                                                                                                 0.0s
 => [csenum internal] load build context                                                                                                                                                                  0.1s
 => => transferring context: 315.77kB                                                                                                                                                                     0.0s
 => [csenum 2/8] RUN apt-get update && apt-get install -y --no-install-recommends     build-essential     wget     gcc     libffi-dev     && rm -rf /var/lib/apt/lists/*                                 13.8s
 => [csenum 3/8] WORKDIR /cs-enum                                                                                                                                                                         0.1s
 => [csenum 4/8] COPY ./scripts /cs-enum/scripts/                                                                                                                                                         0.1s
 => [csenum 7/8] RUN pip install --no-cache-dir -r /cs-enum/scripts/requirements.txt &&     pip install pyinstaller &&     mkdir /cs-enum/scripts/tmp &&     pyinstaller --clean --onefile /cs-enum/scr  13.5s
 => [csenum 8/8] COPY . .                                                                                                                                                                                 0.1s
 => [csenum] exporting to image                                                                                                                                                                           0.9s
 => => exporting layers                                                                                                                                                                                   0.9s
 => => writing image sha256:c9680d0c7a16ee3a7c3ad6faa2c606fd20527dda4f709c8e016b15197a6aaeca                                                                                                              0.0s
 => => naming to docker.io/library/cs-enum-csenum                                                                                                                                                         0.0s
 => [csenum] resolving provenance for metadata file                                                                                                                                                       0.0s
[+] Running 1/1
 ✔ Container csenum_container  Created                                                                                                                                                                    0.1s
Attaching to csenum_container
csenum_container  | [PYI-1:ERROR] Could not create temporary directory!
csenum_container exited with code 255

I just don't know what to do and I'm on the verge on not using python and pyinstaller for my launcher

[rokm]

--runtime-tmpdir=/cs-enum/scripts/tmp

Does it work if you omit --runtime-tmpdir?

[rokm]

Or alternatively, if you ensure that /cs-enum/scripts/tmp exists.

[lambdina]

No but it works when I upgrade my User's priviledges alongside --runtime-tmpdir.