Bug 2044808

Summary: machine-config-daemon-pull.service: use `cp` instead of `cat` when extracting MCD in OKD
Product: OpenShift Container Platform Reporter: Vadim Rutkovsky <vrutkovs>
Component: Machine Config OperatorAssignee: MCO Team <team-mco>
Machine Config Operator sub component: Machine Config Operator QA Contact: Rio Liu <rioliu>
Status: CLOSED ERRATA Docs Contact:
Severity: medium    
Priority: medium CC: aos-bugs, mkrejci, sregidor
Version: 4.10   
Target Milestone: ---   
Target Release: 4.10.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2022-03-10 16:42:23 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2096792    

Description Vadim Rutkovsky 2022-01-25 09:06:43 UTC 
OKD OS doesn't come with MCD included, so it needs to be extracted from MCO image early in the boot. This is implemented via running `cat` command in the container to ensure that the binary is copied atomically.

Since F35 bump `podman run ... --entrypoint=cat ...` no longer exists correctly, so we have to fall back to `podman run ... -v /run/bin:/host/run/bin ... --entrypoint=cp ...` to copy the binary from container. This is not an atomic operation, but at least this method is being regularly tested upstream.
Comment 2 Sergio 2022-01-28 17:06:45 UTC 
This BZ was breaking only OKD nightlies aws tests.

OCP is not affected by this BZ. Moved to VERIFIED.
Comment 5 errata-xmlrpc 2022-03-10 16:42:23 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.10.3 security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:0056