Bug 2039045

Summary:	/etc/containers/registries.conf missing registry.redhat.io terms-based registry definition
Product:	Red Hat Enterprise Linux 8	Reporter:	John Francini <jfrancin>
Component:	containers-common	Assignee:	Jindrich Novy <jnovy>
Status:	CLOSED ERRATA	QA Contact:	Yuhui Jiang <yujiang>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.5	CC:	dornelas, dwalsh, jfrancin, jweng, ypu
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	containers-common-1-29.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	2088139 (view as bug list)		Environment:
Last Closed:	2022-11-08 09:14:55 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2088139

Description John Francini 2022-01-10 19:43:38 UTC

Description of problem:

After Bug 1977280, the list of unqualified search registries was changed from

['registry.access.redhat.com', 'registry.redhat.io', 'docker.io']

to 

["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "docker.io"]

which excludes the terms-based Red Hat container registry.

In addition to the customer issues likely caused by the omission of this registry, it also breaks the Red Hat Software Certification suite, which checks for the explicit presence of both registry.access.redhat.com and registry.redhat.io in the unqualified search registries list.

This change was introduced by RHSA-2021:4154.

Version-Release number of selected component (if applicable):

containers-common-2:1-2.module+el8.5.0+12582+56d94c81.noarch

How reproducible:

Always.


Steps to Reproduce:
1. Install containers-common-2:1-2.module+el8.5.0+12582+56d94c81.noarch

2. Open /etc/containers/registries.conf in less(1) or an editor.

3. Observe that line 22 of this file contains
unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "docker.io"]


Actual results:


Expected results:

Line 22 should be edited to be 

unqualified-search-registries = ["registry.fedoraproject.org", "registry.access.redhat.com", "registry.centos.org", "docker.io", "registry.redhat.io"]

Additional info:

Comment 4 Daniel Walsh 2022-05-18 17:38:54 UTC

This looks good to me.

Comment 5 Jindrich Novy 2022-05-18 17:50:52 UTC

Thanks for the review Dan. Can we get qa ack please?

Is there a similar change needed in RHEL9 too?

Comment 13 errata-xmlrpc 2022-11-08 09:14:55 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: container-tools:rhel8 security, bug fix, and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:7457

Comment 14 Red Hat Bugzilla 2023-09-18 04:30:03 UTC

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 120 days