Bug 2108942

Summary: There is no /run/secrets/etc-pki-entitlement/ on RHEL-8.7.0-20220718.0 podman container
Product: Red Hat Enterprise Linux 8 Reporter: qianzhan
Component: podman-containerAssignee: Jindrich Novy <jnovy>
Status: CLOSED MIGRATED QA Contact: atomic-bugs <atomic-bugs>
Severity: unspecified Docs Contact: Michelle Bearer <mbearer>
Priority: unspecified    
Version: ---Keywords: MigratedToJIRA
Target Milestone: rcFlags: pm-rhel: mirror+
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 2148483 (view as bug list) Environment:
Last Closed: 2023-09-11 18:35:46 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2148483    

Description qianzhan 2022-07-20 05:21:37 UTC
Description of problem:
There is no /run/secrets/etc-pki-entitlement/ on RHEL-8.7.0-20220718.0 podman container

Version-Release number of selected component (if applicable):

podman-4.1.1-6.module+el8.7.0+15895+a6753917.x86_64
podman-catatonit-4.1.1-6.module+el8.7.0+15895+a6753917.x86_64
cockpit-podman-50-1.module+el8.7.0+15895+a6753917.noarch
containernetworking-plugins-1.1.1-3.module+el8.7.0+15895+a6753917.x86_64
containers-common-1-34.module+el8.7.0+15895+a6753917.x86_64
systemd-container-239-60.el8.x86_64
container-selinux-2.188.0-1.module+el8.7.0+15895+a6753917.noarch

How reproducible:
always

Steps to Reproduce:
1. Register RHEL-8.7.0-20220718.0 against Satellite6.12 snap 2.0, and attach subscriptions.

[root@kvm-03-guest11 ~]# subscription-manager list
+-------------------------------------------+
    Installed Product Status
+-------------------------------------------+
Product Name:   Red Hat Enterprise Linux for x86_64 Beta
Product ID:     486
Version:        8.7 Beta
Arch:           x86_64
Status:         Subscribed
Status Details: 
Starts:         12/25/2021
Ends:           12/24/2022

[root@kvm-03-guest11 ~]# ll /etc/pki/entitlement/
total 12
-rw-r--r--. 1 root root 3272 Jul 20 05:13 1366602760125219637-key.pem
-rw-r--r--. 1 root root 4390 Jul 20 05:13 1366602760125219637.pem

2. Create a container on the RHEL host:

[root@kvm-03-guest11 ~]# podman ps
CONTAINER ID  IMAGE                                                   COMMAND     CREATED         STATUS             PORTS       NAMES
74f2ba6ea30f  registry-proxy.engineering.redhat.com/rh-osbs/ubi8:8.7  /bin/bash   12 minutes ago  Up 12 minutes ago              test_container


3. Check the entitlement certs in podman container:
[root@kvm-03-guest11 ~]# podman exec -i test_container /bin/bash -c "ls /run/secrets/etc-pki-entitlement/"
ls: cannot access '/run/secrets/etc-pki-entitlement/': No such file or directory

[root@kvm-03-guest11 ~]# podman exec -i test_container /bin/bash -c "ls /run/secrets/"
redhat.repo
rhsm
[root@kvm-03-guest11 ~]#

Actual results:
As step 3, there is no /run/secrets/etc-pki-entitlement/ in podman container.

Expected results:

There should be entitlement certs in /run/secrets/etc-pki-entitlement/ of podman container.
Additional info:

Comment 1 qianzhan 2022-11-25 07:29:37 UTC
This issue happens on RHEL-8.8.0-20221120.2:

podman-4.3.1-1.module+el8.8.0+17233+49402d35.x86_64
podman-catatonit-4.3.1-1.module+el8.8.0+17233+49402d35.x86_64
cockpit-podman-56-1.module+el8.8.0+17233+49402d35.noarch
containernetworking-plugins-1.1.1-3.module+el8.8.0+17233+49402d35.x86_64
containers-common-1-47.module+el8.8.0+17233+49402d35.x86_64
systemd-container-239-69.el8.x86_64
container-selinux-2.191.0-1.module+el8.8.0+17233+49402d35.noarch

Comment 2 qianzhan 2023-05-25 08:38:45 UTC
This bug happens on RHEL-8.9.0-20230521.41:

podman-4.4.1-12.module+el8.8.0+18735+a32c1292.x86_64
podman-catatonit-4.4.1-12.module+el8.8.0+18735+a32c1292.x86_64
cockpit-podman-63.1-1.module+el8.8.0+18286+cd236dce.noarch
container-selinux-2.205.0-2.module+el8.8.0+18438+15d3aa65.noarch
systemd-container-239-75.el8.x86_64
containers-common-1-64.module+el8.8.0+18571+eed59fc4.x86_64
containernetworking-plugins-1.2.0-1.module+el8.8.0+18060+3f21f2cc.x86_64

Comment 3 RHEL Program Management 2023-09-11 18:32:17 UTC
Issue migration from Bugzilla to Jira is in process at this time. This will be the last message in Jira copied from the Bugzilla bug.

Comment 4 RHEL Program Management 2023-09-11 18:35:46 UTC
This BZ has been automatically migrated to the issues.redhat.com Red Hat Issue Tracker. All future work related to this report will be managed there.

Due to differences in account names between systems, some fields were not replicated.  Be sure to add yourself to Jira issue's "Watchers" field to continue receiving updates and add others to the "Need Info From" field to continue requesting information.

To find the migrated issue, look in the "Links" section for a direct link to the new issue location. The issue key will have an icon of 2 footprints next to it, and begin with "RHEL-" followed by an integer.  You can also find this issue by visiting https://issues.redhat.com/issues/?jql= and searching the "Bugzilla Bug" field for this BZ's number, e.g. a search like:

"Bugzilla Bug" = 1234567

In the event you have trouble locating or viewing this issue, you can file an issue by sending mail to rh-issues. You can also visit https://access.redhat.com/articles/7032570 for general account information.