Bug 1109858

Summary:	Race condition with secrets
Product:	Red Hat Enterprise Linux 7	Reporter:	Alexander Larsson <alexl>
Component:	docker	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED ERRATA	QA Contact:	Virtualization Bugs <virt-bugs>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	bsarathy, dwalsh, lsm5, mjenner
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-09-18 20:45:47 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1109938

Description Alexander Larsson 2014-06-16 13:48:10 UTC

We have a patch that copies the host entitlements to a tmpfs which is then mounted in the containers. This tmpfs is immediately unmounted on the host when the container is reported as started.

Unfortunately libcontainer reports the container as started before the volumes are mounted, so there is a race here where we sometimes unmount to early on the host, making the tmpfs go away.

I've got a libcontainer patch that makes the parent sync to the child at a later time, fixing this:
https://github.com/docker/libcontainer/pull/22

Comment 2 Alexander Larsson 2014-06-19 14:30:54 UTC

The fix is in the htb2 branch as: https://github.com/lsm5/docker/commit/4c4b605e974ff73baff274914d29e2e649b88d15

Comment 3 Daniel Walsh 2014-06-27 16:24:05 UTC

Fixed in docker-1.0

Comment 7 errata-xmlrpc 2014-09-18 20:45:47 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-1266.html