Bug 1710798
Summary: | skopeo inspect does not work for unprivileged user | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Lukas Slebodnik <lslebodn> |
Component: | skopeo | Assignee: | Giuseppe Scrivano <gscrivan> |
Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | rawhide | CC: | amurdaca, bbaude, dwalsh, gscrivan, jnovy, lsm5, nalin, vrothber |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | skopeo-0.1.37-0.gite079f9d.fc30 skopeo-0.1.37-0.gite079f9d.fc29 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2019-07-10 14:16:00 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Lukas Slebodnik
2019-05-16 10:54:16 UTC
It works well on f30 [test@69fccc314fa6 ~]$ rpm -q skopeo skopeo-0.1.36-8.dev.gitd93a581.fc30.x86_64 [test@69fccc314fa6 ~]$ id -u 1000 [test@69fccc314fa6 ~]$ skopeo inspect docker://docker.io/fedora:30 | jq .Labels { "maintainer": "Clement Verna <cverna>" } The problem is skopeo is now attempting to enter the user namespace even though it does not need to when doing an inspect or most of its other commands. We need to stop entering the UserNamespace when we are not using containers/storage. there is PR upstream: https://github.com/containers/skopeo/pull/653 There's a fix upstream that will soon be merged and be part of the next release. (In reply to Giuseppe Scrivano from comment #3) > there is PR upstream: https://github.com/containers/skopeo/pull/653 PR seems to be merged unless my eyes are cheating :-) Could we have a fixed version in rawhide? FEDORA-2019-e2637b6f18 has been submitted as an update to Fedora 30. https://bodhi.fedoraproject.org/updates/FEDORA-2019-e2637b6f18 skopeo-0.1.37-0.gite079f9d.fc30 has been pushed to the Fedora 30 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-e2637b6f18 skopeo-0.1.37-0.gite079f9d.fc29 has been pushed to the Fedora 29 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-96f06abcec Neither f29 nor f30 was affected by this BZ. Just rawhide. And there is not any fixed build for rawhide in koji. skopeo-0.1.37-0.gite079f9d.fc30 has been pushed to the Fedora 30 stable repository. If problems still persist, please make note of it in this bug report. skopeo-0.1.37-0.gite079f9d.fc29 has been pushed to the Fedora 29 stable repository. If problems still persist, please make note of it in this bug report. Neither Fedora 30 not fedora 29 wwere affected by BZ1710798. So I do not understand why it was included in bodhi updates. Moreover my coomments + negative karma was ignored. It was a mistake to include this Bugzilla. (In reply to Daniel Walsh from comment #13) > It was a mistake to include this Bugzilla. And is there any blocker for new build in rawhide? It would be really good to fix after a month. I just kicked off a new build. I thought these were autobuilt, but obviously skopeo is not. I will ping Lokesh to see if he can fix this. Fixed in skopeo-0.1.38-1.dev.git565dbf3.fc31 (In reply to Daniel Walsh from comment #15) > Fixed in skopeo-0.1.38-1.dev.git565dbf3.fc31 > Thank you very much. |