Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1329423 - Skip /dev setup in container when it is bind mounted in
Skip /dev setup in container when it is bind mounted in
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: docker (Show other bugs)
7.2
Unspecified Unspecified
unspecified Severity unspecified
: rc
: ---
Assigned To: Daniel Walsh
atomic-bugs@redhat.com
: Extras
: 1329326 (view as bug list)
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2016-04-21 18:21 EDT by Scott Dodson
Modified: 2016-05-12 11:17 EDT (History)
9 users (show)

See Also:
Fixed In Version: docker-1.9.1-32.el7
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2016-05-12 11:17:53 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2016:1034 normal SHIPPED_LIVE Moderate: docker security, bug fix, and enhancement update 2016-05-12 15:15:01 EDT

  None (edit)
Description Scott Dodson 2016-04-21 18:21:31 EDT
Need this fix in docker-1.9.1
https://github.com/runcom/docker/commit/9a6e5e149d4acfff484ae0eb68334012370cbfca
Comment 1 Scott Dodson 2016-04-21 18:22:34 EDT
So that we can use /dev in privileged containers. See https://bugzilla.redhat.com/show_bug.cgi?id=1329326
Comment 3 Antonio Murdaca 2016-04-21 18:41:59 EDT
I had already opened a PR https://github.com/projectatomic/docker/pull/131. We'll go ahead and merge it. Thanks for testing.
Comment 4 Antonio Murdaca 2016-04-22 09:07:01 EDT
Scott does my fix breaks something? Just want to make sure the introduction of this fix does not regress on something else.
Comment 5 Scott Dodson 2016-04-22 09:13:21 EDT
We haven't had time to test it yet. I believe this is only known to have happened on atomic host which means we have to build a new os-tree to bring this in. Hopefully we can get it tested today.
Comment 6 Daniel Walsh 2016-04-22 10:10:11 EDT
Merged, lets do a build.
Comment 8 Scott Dodson 2016-04-22 14:28:28 EDT
*** Bug 1329326 has been marked as a duplicate of this bug. ***
Comment 11 Scott Dodson 2016-04-25 08:48:17 EDT
Reproducer, perform a containerized install of Origin using atomic host.

1) Provision an atomic host machine, below we assume the hostname is 'ose3-master.example.com'
2) git clone https://github.com/openshift/openshift-ansible
3) cat <<EOF> ~/bz1329424
[OSEv3:children]
masters
nodes

[OSEv3:vars]
deployment_type=openshift-enterprise
containerized=true
ansible_ssh_user=root

[masters]
ose3-master.example.com

[nodes]
ose3-master.example.com openshift_node_labels="{'region': 'infra', 'zone': 'default'}"
EOF

4) ansible-playbook -i ~/bz1329424 openshift-ansible/playbooks/byo/config.yml

SSH into atomic host as non-root user.
Comment 12 Luwen Su 2016-05-03 08:30:59 EDT
I could verified this with steps below

Assume has a host 10.66.0.137
#useradd test
#passwd test
redhat

#docker run -v /dev/:/dev/ -it rhel:latest /bin/bash

Then SSH to the host with another machine
#ssh test@10.66.0.137

In previous version, i met
$ ssh test@10.66.3.137 -X
test@10.66.3.137's password: 
X11 forwarding request failed on channel 0
PTY allocation request failed on channel 0

in docker-1.9.1-38.el7.x86_64
$ ssh test@10.66.0.137 -X
test@10.66.0.137's password: 
X11 forwarding request failed on channel 0
Last login: Tue May  3 20:19:02 2016 from 10.66.70.123
[test@dhcp-0-137 ~]$ 


Just one question here:
Once the terminal fall in "PTY error", i can't recover it , like
* Use 1.9.1-30 mount the /dev in container -> PTY error
   * update to 1.9.1-38, container can' start with -v /dev/:/dev/ and still met the PTY error with non-root user via ssh

* Use 1.9.1-38 mount the /dev in container -> everything will be okay

I'd like to know is it expected
Comment 13 Daniel Walsh 2016-05-03 08:36:39 EDT
Yes this is what is expected.
Comment 14 Luwen Su 2016-05-03 11:39:51 EDT
(In reply to Daniel Walsh from comment #13)
> Yes this is what is expected.

thanks ! move to verified
Comment 16 errata-xmlrpc 2016-05-12 11:17:53 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2016-1034.html

Note You need to log in before you can comment on or make changes to this bug.