https://bugzilla.redhat.com/show_bug.cgi?id=1120567
Bug ID: 1120567 Summary: Cannot run runuser in unprivileged container Product: Fedora Version: 20 Component: docker-io Assignee: lsm5@switzerlandmail.ch Reporter: jpazdziora@redhat.com QA Contact: extras-qa@fedoraproject.org CC: admiller@redhat.com, golang@lists.fedoraproject.org, hushan.jia@gmail.com, lsm5@switzerlandmail.ch, mattdm@redhat.com, mgoldman@redhat.com, s@shk.io, vbatts@redhat.com
Description of problem:
Attempt to run runuser in unprivileged container fails with runuser: System error.
Version-Release number of selected component (if applicable):
docker-io-1.0.0-6.fc20.x86_64
How reproducible:
Deterministic.
Steps to Reproduce: 1. docker run -ti fedora:20 runuser -u ftp id
Actual results:
runuser: System error
Expected results:
uid=14(ftp) gid=50(ftp) groups=50(ftp)
Additional info:
This is a regression against RHEL 7's docker-0.11.1-22.el7.x86_64 and I also believe against older Fedora 20 dockers.
When run in --privileged container, things work.
This blocks our effort to run FreeIPA in unprivileged containers: https://github.com/adelton/docker-freeipa/blob/master/systemctl
https://bugzilla.redhat.com/show_bug.cgi?id=1120567
Marek Goldmann mgoldman@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CLOSED Resolution|--- |DUPLICATE Last Closed| |2014-07-17 05:40:53
--- Comment #1 from Marek Goldmann mgoldman@redhat.com --- This is the same issue as in bug 1119849, closing this one.
*** This bug has been marked as a duplicate of bug 1119849 ***
golang@lists.fedoraproject.org