https://bugzilla.redhat.com/show_bug.cgi?id=1120567
Bug ID: 1120567
Summary: Cannot run runuser in unprivileged container
Product: Fedora
Version: 20
Component: docker-io
Assignee: lsm5(a)switzerlandmail.ch
Reporter: jpazdziora(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org,
hushan.jia(a)gmail.com, lsm5(a)switzerlandmail.ch,
mattdm(a)redhat.com, mgoldman(a)redhat.com, s(a)shk.io,
vbatts(a)redhat.com
Description of problem:
Attempt to run runuser in unprivileged container fails with runuser: System
error.
Version-Release number of selected component (if applicable):
docker-io-1.0.0-6.fc20.x86_64
How reproducible:
Deterministic.
Steps to Reproduce:
1. docker run -ti fedora:20 runuser -u ftp id
Actual results:
runuser: System error
Expected results:
uid=14(ftp) gid=50(ftp) groups=50(ftp)
Additional info:
This is a regression against RHEL 7's docker-0.11.1-22.el7.x86_64 and I also
believe against older Fedora 20 dockers.
When run in --privileged container, things work.
This blocks our effort to run FreeIPA in unprivileged containers:
https://github.com/adelton/docker-freeipa/blob/master/systemctl
--
You are receiving this mail because:
You are on the CC list for the bug.
golang-github-smarterclayton-go-systemd has broken dependencies in the F-21 tree:
On x86_64:
golang-github-smarterclayton-go-systemd-devel-0-0.5.git5cb9e9e.fc21.noarch requires golang(github.com/guelfey/go.dbus)
On i386:
golang-github-smarterclayton-go-systemd-devel-0-0.5.git5cb9e9e.fc21.noarch requires golang(github.com/guelfey/go.dbus)
On armhfp:
golang-github-smarterclayton-go-systemd-devel-0-0.5.git5cb9e9e.fc21.noarch requires golang(github.com/guelfey/go.dbus)
Please resolve this as soon as possible.
golang-github-smarterclayton-go-systemd has broken dependencies in the rawhide tree:
On x86_64:
golang-github-smarterclayton-go-systemd-devel-0-0.5.git5cb9e9e.fc21.noarch requires golang(github.com/guelfey/go.dbus)
On i386:
golang-github-smarterclayton-go-systemd-devel-0-0.5.git5cb9e9e.fc21.noarch requires golang(github.com/guelfey/go.dbus)
On armhfp:
golang-github-smarterclayton-go-systemd-devel-0-0.5.git5cb9e9e.fc21.noarch requires golang(github.com/guelfey/go.dbus)
Please resolve this as soon as possible.
https://bugzilla.redhat.com/show_bug.cgi?id=1023771
Vincent Batts <vbatts(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |vbatts(a)redhat.com
Assignee|mario.blaettermann(a)gmail.co |vbatts(a)redhat.com
|m |
--- Comment #2 from Vincent Batts <vbatts(a)redhat.com> ---
Created attachment 918507
--> https://bugzilla.redhat.com/attachment.cgi?id=918507&action=edit
spec tweaks
Looks pretty good. A couple of points (and a patch to reference):
* removed a little boiler-plate, to use the golang rpm macros
* which makes a BuildRequires: golang
* preserve timestamps of copied source ( and removed the redundant -r, since -a
does a recursive copy)
* Stub out for future tests. Hopefully upstream will provide *_test.go for us
to check against.
* removed ownership of directories that the golang rpm owns
Lastly, I'm not opposed to the break out of the pieces of %{import_path}, just
as long as we standardize on the use of %{import_path}.
--
You are receiving this mail because:
You are on the CC list for the bug.