Bug 2023112

Summary: Podman should be built with the support of 'libsubid'
Product: Red Hat Enterprise Linux 8 Reporter: Alexey Tikhonov <atikhono>
Component: podmanAssignee: Jindrich Novy <jnovy>
Status: CLOSED ERRATA QA Contact: Yuhui Jiang <yujiang>
Severity: high Docs Contact:
Priority: unspecified    
Version: 8.5CC: atomic-bugs, bbaude, bpalm, cpippin, dwalsh, jligon, jnovy, lsm5, mheon, pthomas, tsweeney, umohnani, ypu
Target Milestone: rcKeywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: podman-3.4.3-0.6.el8 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2023109 Environment:
Last Closed: 2022-05-10 13:27:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2019921, 2023109    
Bug Blocks:    

Description Alexey Tikhonov 2021-11-14 20:06:58 UTC
+++ This bug was initially created as a clone of Bug #2023109 +++

RHEL build of Podman misses 'libsubid' support.

If I understand correctly, with a recent enough base (i.e. 3.4+) support is detected and enabled automatically via `libsubid_tag.sh` if `shadow-utils-subid-devel` is available at build time.

This is supported on Fedora since 35:
https://src.fedoraproject.org/rpms/podman/blob/f35/f/podman.spec#_97
https://src.fedoraproject.org/rpms/podman/blob/f35/f/podman.spec#_458

Comment 2 Jindrich Novy 2021-11-15 11:00:11 UTC
Can we get qa ack please?

Comment 12 errata-xmlrpc 2022-05-10 13:27:52 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: container-tools:rhel8 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:1762

Comment 13 Brandon Palm 2022-05-12 14:45:41 UTC
I don't know if this is the right place to mention this, but my Dockerfile looks like:

$ cat Dockerfile 
FROM registry.access.redhat.com/ubi8/ubi:latest

RUN dnf clean all
RUN dnf update; dnf upgrade
RUN dnf install -y podman

CMD ["echo hello world"]

And this is what building it looks like:

 > [4/4] RUN dnf install -y podman:                                                                                            
#7 0.812 Updating Subscription Management repositories.                                                                        
#7 0.813 Unable to read consumer identity                                                                                      
#7 0.818                                                                                                                       
#7 0.818 This system is not registered with an entitlement server. You can use subscription-manager to register.
#7 0.818 
#7 0.868 Last metadata expiration check: 0:16:12 ago on Thu May 12 14:13:14 2022.
#7 1.112 Error: 
#7 1.112  Problem: conflicting requests
#7 1.112   - nothing provides libsubid.so.3()(64bit) needed by podman-2:4.0.2-6.module+el8.6.0+14877+f643d2d6.x86_64
#7 1.113 (try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)


I'm trying to figure out why libsubid.so.3 is missing?

Comment 14 Alexey Tikhonov 2022-05-12 15:10:26 UTC
(In reply to Brandon Palm from comment #13)
> #7 1.112   - nothing provides libsubid.so.3()(64bit) needed by

Is this RHEL8.6?
What happens if you try to install 'shadow-utils-subid' package manually?

Comment 15 Brandon Palm 2022-05-12 15:17:43 UTC
 => ERROR [4/4] RUN dnf install -y shadow-utils-subid podman                                                              0.8s
------                                                                                                                         
 > [4/4] RUN dnf install -y shadow-utils-subid podman:                                                                         
#7 0.564 Updating Subscription Management repositories.                                                                        
#7 0.564 Unable to read consumer identity                                                                                      
#7 0.567 
#7 0.567 This system is not registered with an entitlement server. You can use subscription-manager to register.
#7 0.567 
#7 0.606 Last metadata expiration check: 1:04:09 ago on Thu May 12 14:13:14 2022.
#7 0.721 No match for argument: shadow-utils-subid
#7 0.725 Error: Unable to find a match: shadow-utils-subid

Actually I think this BZ is my actual problem: https://bugzilla.redhat.com/show_bug.cgi?id=2084179