-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[v3.0.1-rhel] podman cp: ignore EPERMs in rootless mode #9732
[v3.0.1-rhel] podman cp: ignore EPERMs in rootless mode #9732
Conversation
Signed-off-by: Valentin Rothberg <[email protected]>
Ignore permission errors when copying from a rootless container. TTY devices inside rootless containers are owned by the host's root user which is "nobody" inside the container's user namespace rendering us unable to even read them. Enable the integration test which was temporarily disabled for rootless users. Signed-off-by: Valentin Rothberg <[email protected]>
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: vrothberg The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Had to add a third commit to fix the containers.conf timezone e2e test. I do not know why that worked before since New York yields EDT, not EST. |
@@ -10,7 +10,7 @@ require ( | |||
github.com/codahale/hdrhistogram v0.0.0-20161010025455-3a0bb77429bd // indirect | |||
github.com/containernetworking/cni v0.8.1 | |||
github.com/containernetworking/plugins v0.9.0 | |||
github.com/containers/buildah v1.19.7 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This will give us a higher version of Buildah vendored into Podman than we have available on RHEL (v1.19.6).
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Not sure what that implies. We need .7
to fix the issue.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just concerned that if you run Buildah you could get different behavior than running podman build
. I'm probably over-fretting.
test/e2e/containers_conf_test.go
Outdated
@@ -311,7 +311,7 @@ var _ = Describe("Podman run", func() { | |||
session = podmanTest.Podman([]string{"run", ALPINE, "date", "+'%H %Z'"}) | |||
session.WaitWithDefaultTimeout() | |||
Expect(session.ExitCode()).To(Equal(0)) | |||
Expect(session.OutputToString()).To(ContainSubstring("EST")) | |||
Expect(session.OutputToString()).To(ContainSubstring("EDT")) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Won't this change/fail in the fall when we go back to EST? Seems like a check that needs to be modified....
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
DO NOT MERGE THIS. Use 8de5607 instead.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done, thanks!
The New York timezone changes between summer and winter time. Make sure the test allows both timezones. Signed-off-by: Paul Holzinger <[email protected]>
dc90ab4
to
82c35bf
Compare
I can live with Buildah patch release not matching. If it was a minor release I'd be more concerned. LGTM, but CI is red even after your patch. |
The APIv2 tests flake. I want to wait with restarting until the other tests turn green. |
Maybe this would be a good time to cherry-pick #9699 |
/lgtm |
Ignore permission errors when copying from a rootless container.
TTY devices inside rootless containers are owned by the host's
root user which is "nobody" inside the container's user namespace
rendering us unable to even read them.
Enable the integration test which was temporarily disabled for rootless
users.
Signed-off-by: Valentin Rothberg [email protected]
This one slipped through in the backports. Last bit needed to fix https://bugzilla.redhat.com/show_bug.cgi?id=1936927.