Hide Forgot
Description of problem: When oscap-docker utility is executed on system where atomic 1.13.8 is installed, it fails with import error. Version-Release number of selected component (if applicable): openscap-utils-1.2.10-2.el7.x86_64 atomic-1.13.8-1.el7.x86_64 How reproducible: reliably Steps to Reproduce: 1. oscap-docker --help 2. oscap-docker image-cve $TARGET Actual results: "Atomic.mount.DockerMount" has been successfully imported but it doesn't have the _clean_temp_container_by_path method. Please upgrade your Atomic installation to 1.4 or higher. Expected results: Help is printed. $TARGET is scanned Additional info:
Discussed this with Brent Baude. The method was removed in https://github.com/projectatomic/atomic/commit/9a0114c2845beba372116b2fdcb605a3f59b445b#diff-ce5473cd96a720a53d0834698c9b2eaaL688
fix pushed upstream -> https://github.com/projectatomic/atomic/pull/769
Was with the US Army today (Weds 7-DEC) who are using OpenSCAP to scan containers. They just rebased to RHEL 7.3 and container scanning no longer works. What is the ETA on when a bugfix will be issued in RHEL?
Brent this fix did not go out in rhel7.3.1, so it will show up in rhel7.3.2 atomic-1.14.* release. Which is scheduled around 6 weeks from now, I believe.
this should be more than good to go now ...
I can reproduce this issue in atomic-1:1.13.8-1.el7, and it works well in fixed version atomic-1:1.14.1-1.el7 and latest atomic-1.17.2-8.git2760e30.el7.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1627