Bug 2183602

Summary: docker login compatibility issue [rhel-9.2.0.z]
Product: Red Hat Enterprise Linux 9 Reporter: RHEL Program Management Team <pgm-rhel-tools>
Component: podmanAssignee: Jindrich Novy <jnovy>
Status: CLOSED ERRATA QA Contact: Alex Jia <ajia>
Severity: high Docs Contact:
Priority: unspecified    
Version: 9.3CC: ajia, atomic-bugs, bbaude, dwalsh, jligon, jnovy, lsm5, mboddu, mheon, pthomas, tsweeney, umohnani, ypu
Target Milestone: rcKeywords: Triaged, ZStream
Target Release: ---Flags: ypu: needinfo-
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: podman-4.4.1-7.el9_2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 2183597 Environment:
Last Closed: 2023-05-09 11:02:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2183597    
Bug Blocks:    

Comment 7 Alex Jia 2023-04-11 08:39:54 UTC
This bug has been verified on podman-4.4.1-7.el9_2.

[test@kvm-01-guest10 ~]$ cat /etc/redhat-release
Red Hat Enterprise Linux release 9.2 (Plow)

[test@kvm-01-guest10 ~]$ rpm -q podman crun systemd kernel
podman-4.4.1-7.el9_2.x86_64
crun-1.8.1-1.el9.x86_64
systemd-252-13.el9_2.x86_64
kernel-5.14.0-284.10.1.el9_2.x86_64

[test@kvm-01-guest10 ~]$ id
uid=1000(test) gid=1000(test) groups=1000(test) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

[test@kvm-01-guest10 ~]$ podman system service -t 0 &
[1] 83413

[test@kvm-01-guest10 ~]$ podman run --privileged -it --rm -v $XDG_RUNTIME_DIR/podman/podman.sock:/var/run/docker.sock docker sh
Resolved "docker" as an alias (/etc/containers/registries.conf.d/000-shortnames.conf)
Trying to pull docker.io/library/docker:latest...
Getting image source signatures
Copying blob 04921806bf90 done  
Copying blob f56be85fc22e done  
Copying blob 7ed9ddfd3b8f done  
Copying blob 788e1ab5616a done  
Copying blob 4e33d011f086 done  
Copying blob 383037bf46bc done  
Copying blob de21e211d8be done  
Copying blob d1a705462f92 done  
Copying blob 026562b829bc done  
Copying blob f4bc4d1e2e3a done  
Copying blob 06512f64e545 done  
Copying blob 97a6e8d4b278 done  
Copying blob 65fc0503abc0 done  
Copying blob 810d9c8fb6b2 done  
Copying config e072c2e5e5 done  
Writing manifest to image destination
Storing signatures
/ # docker images
REPOSITORY   TAG       IMAGE ID       CREATED      SIZE
docker       latest    e072c2e5e550   6 days ago   319MB
/ # docker login -u foo -p bar
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
Error response from daemon: login attempt to https://index.docker.io/v1/ failed with status: 401 Unauthorized

NOTE: I can login successfully w/ real username and password.

Comment 10 Alex Jia 2023-04-19 02:01:52 UTC
This bug has been verified on podman-4.4.1-8.el9_2.

[test@kvm-01-guest19 ~]$ cat /etc/redhat-release 
Red Hat Enterprise Linux release 9.2 (Plow)

[test@kvm-01-guest19 ~]$ rpm -q podman crun systemd kernel
podman-4.4.1-8.el9_2.x86_64
crun-1.8.4-1.el9_2.x86_64
systemd-252-13.el9_2.x86_64
kernel-5.14.0-284.11.1.el9_2.x86_64

[test@kvm-01-guest19 ~]$ id
uid=1000(test) gid=1000(test) groups=1000(test) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023

[test@kvm-01-guest19 ~]$ podman system service -t 0 &
[1] 21568
[test@kvm-01-guest19 ~]$ podman run --privileged -it --rm -v $XDG_RUNTIME_DIR/podman/podman.sock:/var/run/docker.sock docker sh
Resolved "docker" as an alias (/etc/containers/registries.conf.d/000-shortnames.conf)
Trying to pull docker.io/library/docker:latest...
Getting image source signatures
Copying blob 1235e3e7c4ee done  
Copying blob f56be85fc22e done  
Copying blob 788e1ab5616a done  
Copying blob 7ed9ddfd3b8f done  
Copying blob cdaa2fd4fcdb done  
Copying blob 31a38982befb done  
Copying blob f6fb910bd0ee done  
Copying blob bb5a4f7b5839 done  
Copying blob c080a71682dd done  
Copying blob 0eb438226b4a done  
Copying blob 4854e3a55c15 done  
Copying blob f975174ddc6e done  
Copying blob ab434ab7c403 done  
Copying blob 06733a7a4c46 done  
Copying config 1be445cc55 done  
Writing manifest to image destination
Storing signatures
/ # docker images
REPOSITORY   TAG       IMAGE ID       CREATED        SIZE
docker       latest    1be445cc553e   27 hours ago   319MB
/ # docker login -u foo -p bar
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
Error response from daemon: login attempt to https://index.docker.io/v1/ failed with status: 401 Unauthorized
/ # docker login -u ajia -p valid_password
WARNING! Using --password via the CLI is insecure. Use --password-stdin.
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-store

Login Succeeded

Comment 14 errata-xmlrpc 2023-05-09 11:02:52 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (podman bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:2620