Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix permissions on containers.conf #2332

Merged
merged 1 commit into from
Apr 28, 2020
Merged

Conversation

rhatdan
Copy link
Member

@rhatdan rhatdan commented Apr 27, 2020

When running in a rootless buildah, the build user
is not allowed to read /etc/containers/containers.conf
which is causing these containers to fail.

This patch makes containers.conf world readable.

Signed-off-by: Daniel J Walsh [email protected]

What type of PR is this?

/kind api-change
/kind bug
/kind cleanup
/kind deprecation
/kind design
/kind documentation
/kind failing-test
/kind feature
/kind flake
/kind other

What this PR does / why we need it:

How to verify it

Which issue(s) this PR fixes:

Special notes for your reviewer:

Does this PR introduce a user-facing change?


@rhatdan
Copy link
Member Author

rhatdan commented Apr 27, 2020

Copy link
Member

@vrothberg vrothberg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@TomSweeneyRedHat
Copy link
Member

Can you update the https://github.com/containers/buildah/blob/master/contrib/buildahimage/stablebyhand/Containerfile.buildahstable file too please?

It's too bad ADD/COPY doesn't have a --chperm option similar to --chown.

When running in a rootless buildah, the build user
is not allowed to read /etc/containers/containers.conf
which is causing these containers to fail.

This patch makes containers.conf world readable.

Signed-off-by: Daniel J Walsh <[email protected]>
@rhatdan
Copy link
Member Author

rhatdan commented Apr 27, 2020

@TomSweeneyRedHat Updated.

@TomSweeneyRedHat
Copy link
Member

Thx @rhatdan
LGTM

@TomSweeneyRedHat
Copy link
Member

bors r+

@bors
Copy link
Contributor

bors bot commented Apr 27, 2020

🕐 Waiting for PR status (Github check) to be set, probably by CI. Bors will automatically try to run when all required PR statuses are set.

@TomSweeneyRedHat
Copy link
Member

bors retry

@bors
Copy link
Contributor

bors bot commented Apr 28, 2020

Build succeeded:

  • cirrus-ci/success

@bors bors bot merged commit 8169acd into containers:master Apr 28, 2020
@TomSweeneyRedHat
Copy link
Member

@cevich it went through, thanks for the help!

snj33v pushed a commit to snj33v/libpod that referenced this pull request May 31, 2020
Adding the changes to the Podman image Docker/Containerfiles similar
to @rhatdan 's changes in containers/buildah#2332

In short it changes the perms on containers.conf so it can be used by a
rootless user.

Signed-off-by: TomSweeneyRedHat <[email protected]>
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Oct 3, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants