Bug 2183596

Summary:	docker login compatibility issue
Product:	Red Hat Enterprise Linux 8	Reporter:	Tom Sweeney <tsweeney>
Component:	podman	Assignee:	Jindrich Novy <jnovy>
Status:	CLOSED ERRATA	QA Contact:	Alex Jia <ajia>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	8.9	CC:	ajia, bbaude, dwalsh, jligon, jnovy, lsm5, mboddu, mheon, pthomas, tsweeney, umohnani, ypu
Target Milestone:	rc	Keywords:	Triaged, ZStream
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	podman-4.4.1-13.el8	Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	2183597 2183601 (view as bug list)		Environment:
Last Closed:	2023-11-14 15:29:09 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2183597, 2183601

Description Tom Sweeney 2023-03-31 18:07:17 UTC

Description of problem:

There is a docker login registry compatiliby issue.  Please see: 
https://github.com/containers/podman/issues/17571 for details.

This is already fixed upstream, creating BZs to get it into RHEL 8.8/9.2 ZeroDay.

For RHEL 8.8 and 9.2, this Fix: https://github.com/containers/podman/pull/17581 needs to be backported into the Podman v4.4.1 release branch, and c/common needs to be bumped up to v0.51.2 within the same branch.

Comment 2 Tom Sweeney 2023-03-31 19:10:33 UTC

Addressed with:  https://github.com/containers/podman/pull/17581

Assigning to @jnovy for any further BZ or packaging needs.

Comment 3 Alex Jia 2023-04-11 07:51:03 UTC

This bug has been verified on podman-4.4.1-13.module+el8.9.0+18566+0239040b.

[test@kvm-02-guest05 ~]$ cat /etc/redhat-release 
Red Hat Enterprise Linux release 8.9 Beta (Ootpa)

[test@kvm-02-guest05 ~]$ rpm -q podman runc systemd kernel
podman-4.4.1-13.module+el8.9.0+18566+0239040b.x86_64
runc-1.1.5-1.module+el8.9.0+18566+0239040b.x86_64
systemd-239-74.el8_8.x86_64
kernel-4.18.0-484.el8.x86_64

[test@kvm-02-guest05 ~]$ id
uid=1000(test) gid=1000(test) groups=1000(test) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

[test@kvm-02-guest05 ~]$ podman system service -t 0 &
[1] 122681
[test@kvm-02-guest05 ~]$ podman run --privileged -it --rm -v $XDG_RUNTIME_DIR/podman/podman.sock:/var/run/docker.sock docker sh
/ # docker images
REPOSITORY   TAG       IMAGE ID       CREATED      SIZE
docker       latest    e072c2e5e550   6 days ago   319MB
/ # docker login -u foo -p bar
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
Error response from daemon: login attempt to https://index.docker.io/v1/ failed with status: 401 Unauthorized

NOTE: I can login successfully w/ real username and password.

Comment 7 Alex Jia 2023-05-05 08:04:22 UTC

Moving this bug to verified state per Comment 3.

Comment 9 errata-xmlrpc 2023-11-14 15:29:09 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: container-tools:rhel8 security and bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2023:6939