Bug 1437817

This appears to be fixed in oci-systemd-hook-0.1.7-2.  We'd similar issues reported with 1.7-1 and the fixes there appear to address this issue as well.  Sending this off to QA to verify.

[root@rhelbz ~]# docker run -ti busybox
Unable to find image 'busybox:latest' locally
Trying to pull repository registry.access.redhat.com/busybox ... 
unknown: Not Found
Trying to pull repository docker.io/library/busybox ... 
latest: Pulling from docker.io/library/busybox
7520415ce762: Pull complete 
Digest: sha256:32f093055929dbc23dec4d03e09dfe971f5973a9ca5cf059cbfb644c206aa83f
Status: Downloaded newer image for docker.io/busybox:latest
/ # hostname
ade1a0dab335
/ # ls
bin   dev   etc   home  proc  root  run   sys   tmp   usr   var
/ # exit
[root@rhelbz ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
docker.io/busybox   latest              00f017a8c2a6        4 weeks ago         1.11 MB
[root@rhelbz ~]# docker run -ti busybox
/ # ls -alF
total 16
drwxr-xr-x   13 root     root           167 Apr 10 16:49 ./
drwxr-xr-x   13 root     root           167 Apr 10 16:49 ../
-rwxr-xr-x    1 root     root             0 Apr 10 16:49 .dockerenv*
-rwxr-xr-x    1 root     root             0 Apr 10 16:49 .dockerinit*
drwxr-xr-x    2 root     root         12288 Mar  9 00:05 bin/
drwxr-xr-x    5 root     root           380 Apr 10 16:49 dev/
drwxr-xr-x    2 root     root           124 Apr 10 16:49 etc/
drwxr-xr-x    2 nobody   nogroup          6 Mar  9 00:05 home/[root@rhelbz ~]# 
/ # hostname
ade1a0dab335
/ # ls
bin   dev   etc   home  proc  root  run   sys   tmp   usr   var
/ # exit
######### From second ssh connection while the above was running:
[root@rhelbz ~]# docker ps
CONTAINER ID        IMAGE               COMMAND             CREATED             STATUS              PORTS               NAMES
20c37849ef15        busybox             "sh"                7 minutes ago       Up 7 minutes                            sleepy_cori
[root@rhelbz ~]# docker images
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
docker.io/busybox   latest              00f017a8c2a6        4 weeks ago         1.11 MB
######### End second ssh connection, back to first ###########

[root@rhelbz ~]# rpm -qa | grep docker
docker-rhel-push-plugin-1.10.3-59.el7.x86_64
docker-common-1.10.3-59.el7.x86_64
docker-1.10.3-59.el7.x86_64
[root@rhelbz ~]# rpm -qa | grep oci-*
oci-register-machine-0-3.11.gitdd0daef.el7.x86_64
oci-systemd-hook-0.1.7-2.git2788078.el7.x86_64
[root@rhelbz ~]# uname -a
Linux rhelbz.localdomain 3.10.0-514.10.2.el7.x86_64 #1 SMP Mon Feb 20 02:37:52 EST 2017 x86_64 x86_64 x86_64 GNU/Linux
[root@rhelbz ~]# cat /etc/*/release
cat: /etc/*/release: No such file or directory
[root@rhelbz ~]# cat /etc/*release
NAME="Red Hat Enterprise Linux Server"
VERSION="7.3 (Maipo)"
ID="rhel"
ID_LIKE="fedora"
VERSION_ID="7.3"
PRETTY_NAME="Employee SKU"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:redhat:enterprise_linux:7.3:GA:server"
HOME_URL="https://www.redhat.com/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"

REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 7"
REDHAT_BUGZILLA_PRODUCT_VERSION=7.3
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux"
REDHAT_SUPPORT_PRODUCT_VERSION="7.3"
Red Hat Enterprise Linux Server release 7.3 (Maipo)
Red Hat Enterprise Linux Server release 7.3 (Maipo)
[root@rhelbz ~]# 

dr-xr-xr-x  136 root     root             0 Apr 10 16:49 proc/
drwxr-xr-x    2 root     root            26 Apr 10 16:57 root/
drwxr-xr-x    3 root     root            21 Apr 10 16:49 run/
dr-xr-xr-x   13 root     root             0 Apr 10 16:23 sys/
drwxrwxrwt    2 root     root             6 Mar  9 00:05 tmp/
drwxr-xr-x    3 root     root            18 Mar  9 00:05 usr/
drwxr-xr-x    4 root     root            30 Mar  9 00:05 var/
/ # exit

Verified with fresh install of 1.10.3-59 and oci-systemd-hook-0.1.7-2.git2788078.el7.x86_64.

One question that we have is where exactly is docker 1.10 being used with an updated oci-systemd-hook? We would like to move to newer code in oci-systemd-hook that doesn't support docker 1.10.

I think the issue is they installed docker 1.10 directly calling out the version.  (See comment #3 for more info).  When that version of docker installed, it installed the latest version of oci-systemd-hook from rhel-7-server-extras due to the dependencies that are set up.

Can we adjust which version of oci-systemd-hook is installed based on the version of docker that is installed?  That way in this instance oci-systemd-hook 1.6.1 or something would be installed instead of the latest?

PR submitted at https://github.com/projectatomic/oci-systemd-hook/pull/62 and a tar file with the proposed fix sent via e-mail to Johhny Liu (Reporter).

PR has been merged.  (https://github.com/projectatomic/oci-systemd-hook/pull/62)

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:1623