Bug 2152026
| Summary: | podman: ubi8 sticky bit removed from /tmp [rhel-9.1.0.z] | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 9 | Reporter: | RHEL Program Management Team <pgm-rhel-tools> |
| Component: | podman | Assignee: | Jindrich Novy <jnovy> |
| Status: | CLOSED ERRATA | QA Contact: | Joy Pu <ypu> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 9.2 | CC: | alex.wayfer, atomic-bugs, bbaude, dornelas, dwalsh, fryguy9, jligon, jnovy, jwboyer, lfriedma, lsm5, mbasti, mboddu, mheon, nalin, pthomas, rseip, tsweeney, umohnani, yorgos.saslis, ypu |
| Target Milestone: | rc | Keywords: | Triaged, ZStream |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | podman-4.2.0-9.el9_1 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 2152023 | Environment: | |
| Last Closed: | 2023-01-23 15:18:25 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | 2152023 | ||
| Bug Blocks: | |||
|
Comment 2
Tom Sweeney
2022-12-09 22:17:24 UTC
Test with podman-4.2.0-9.el9_1.x86_64, the t flag still exist in the build image. So move this to verified: [root@ibm-x3650m4-01-vm-07 test]# podman build -t test . STEP 1/23: FROM scratch STEP 2/23: ADD rhel-base-fs-container-8.6-2480.x86_64.tar.gz / --> 9b0605ae60f STEP 3/23: ADD tls-ca-bundle.pem /tmp/tls-ca-bundle.pem --> 86ca79fdd1b STEP 4/23: ADD atomic-reactor-repos/* /etc/yum.repos.d/ --> f9c1348ccc0 STEP 5/23: LABEL maintainer="Red Hat, Inc." --> 5ee4925d9fb STEP 6/23: LABEL com.redhat.component="ubi8-container" name="ubi8" version="8.6" --> 006dea1fe93 STEP 7/23: LABEL com.redhat.license_terms="https://www.redhat.com/en/about/red-hat-end-user-license-agreements#UBI" --> 4ba84716c09 STEP 8/23: LABEL summary="Provides the latest release of Red Hat Universal Base Image 8." --> 93491a7cbeb STEP 9/23: LABEL description="The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly." --> 8b92ba3804f STEP 10/23: LABEL io.k8s.display-name="Red Hat Universal Base Image 8" --> aeecfdad164 STEP 11/23: LABEL io.openshift.expose-services="" --> 411f584fbb5 STEP 12/23: LABEL io.openshift.tags="base rhel8" --> 97f291c42c1 STEP 13/23: ENV container oci --> 7cc86b94e5b STEP 14/23: ENV PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin --> dd38a848ede STEP 15/23: CMD ["/bin/bash"] --> 2f30a37c6ad STEP 16/23: RUN rm -rf /var/log/* --> a3d19066eed STEP 17/23: RUN mkdir -p /var/log/rhsm --> f97a29352ee STEP 18/23: LABEL release=1054 --> dbb7ad0ac44 STEP 19/23: ADD ubi8-container-8.6-1054.json /root/buildinfo/content_manifests/ubi8-container-8.6-1054.json --> 03ed50f6bda STEP 20/23: ADD Dockerfile-ubi8-8.6-1054 /root/buildinfo/Dockerfile-ubi8-8.6-1054 --> ec1b1299384 STEP 21/23: LABEL "distribution-scope"="public" "vendor"="Red Hat, Inc." "build-date"="2022-12-19T02:04:53" "architecture"="x86_64" "vcs-type"="git" "vcs-ref"="f1ee6e37554363ec55e0035aba1a693d3627fdeb" "io.k8s.description"="The Universal Base Image is designed and engineered to be the base layer for all of your containerized applications, middleware and utilities. This base image is freely redistributable, but Red Hat only supports Red Hat technologies through subscriptions for Red Hat products. This image is maintained by Red Hat and updated regularly." "url"="https://access.redhat.com/containers/#/registry.access.redhat.com/ubi8/images/8.6-1054" --> 9778ec795b8 STEP 22/23: RUN rm -f '/etc/yum.repos.d/beaker-AppStream.repo' --> 40b554d1d63 STEP 23/23: RUN rm -f /tmp/tls-ca-bundle.pem COMMIT test --> 6d592c3624f Successfully tagged localhost/test:latest 6d592c3624f7345a8f25149018f7c44b14f54af892a0888ddf77d0b882b12dd5 [root@ibm-x3650m4-01-vm-07 test]# podman run test ls -ld /tmp drwxrwxrwt. 1 root root 31 Dec 19 09:20 /tmp Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (podman bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2023:0314 |