Bug 2100323 - Sqlit-based catsrc cannot be ready due to "Error: open ./db-xxxx: permission denied"
Summary: Sqlit-based catsrc cannot be ready due to "Error: open ./db-xxxx: permission ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: OLM
Version: 4.11
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: ---
: 4.11.0
Assignee: Per da Silva
QA Contact: xzha
URL:
Whiteboard:
Depends On:
Blocks: 2101802
TreeView+ depends on / blocked
 
Reported: 2022-06-23 04:36 UTC by xzha
Modified: 2022-08-10 11:19 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2022-08-10 11:19:11 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift operator-framework-olm pull 324 0 None open Bug 2100323: Create database copy in tmp directory (#974) 2022-06-23 12:49:00 UTC
Red Hat Product Errata RHSA-2022:5069 0 None None None 2022-08-10 11:19:19 UTC

Description xzha 2022-06-23 04:36:02 UTC
Description of problem:
Sqlit-based catsrc cannot be ready due to "Error: open ./db-xxxx: permission denied"

Version-Release number of selected component (if applicable):
zhaoxia@xzha-mac test % oc get clusterversion
NAME      VERSION                              AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.11.0-0.nightly-2022-06-22-190830   True        False         47m     Cluster version is 4.11.0-0.nightly-2022-06-22-190830
zhaoxia@xzha-mac test % oc exec catalog-operator-79bf7db89f-td58w     -- olm --version
OLM version: 0.19.0
git commit: 8ee785c8646e0f8395ada5e10ebb04ac161331a0

How reproducible:
always

Steps to Reproduce:
1. create index image
# opm index add --bundles quay.io/olmqe/ditto-operator:0.1.0,quay.io/olmqe/ditto-operator:0.1.1,quay.io/olmqe/ditto-operator:0.2.0 --tag quay.io/olmqe/ditto-index:test-xzha-1 -c docker
# docker push quay.io/olmqe/ditto-index:test-xzha-1

2. create catsrc
zhaoxia@xzha-mac test % cat catsrc-test.yaml 
apiVersion: operators.coreos.com/v1alpha1
kind: CatalogSource
metadata:
  name: test-index-xzha-1
  namespace: openshift-marketplace
spec:
  displayName: Test
  publisher: OLM-QE
  sourceType: grpc
  image: quay.io/olmqe/ditto-index:test-xzha-1
  updateStrategy:
    registryPoll:
      interval: 10m

oc apply -f catsrc-test.yaml 

3. check pod
zhaoxia@xzha-mac test % oc get pod -n openshift-marketplace 
NAME                                    READY   STATUS             RESTARTS       AGE
certified-operators-2f2b6               1/1     Running            0              55m
community-operators-9cg5n               1/1     Running            0              55m
marketplace-operator-567b597b45-wfvmj   1/1     Running            0              58m
redhat-marketplace-fz8fg                1/1     Running            0              55m
redhat-operators-b8g69                  1/1     Running            0              55m
test-index-xzha-1-rmz8t                 0/1     CrashLoopBackOff   5 (89s ago)    4m38s
test-index-xzha-s8wks                   0/1     CrashLoopBackOff   6 (119s ago)   7m39s

zhaoxia@xzha-mac test % oc get pod test-index-xzha-1-rmz8t  -o yaml
containerStatuses:
  - containerID: cri-o://d7047090732c234301128c7fd9b7fa36869bc01408966b3b93a88baf1023053a
    image: quay.io/olmqe/ditto-index:test-xzha-1
    imageID: quay.io/olmqe/ditto-index@sha256:f09ce64f154e9bcb1e8064aedeef982768a02256765c636932df044aba3499da
    lastState:
      terminated:
        containerID: cri-o://d7047090732c234301128c7fd9b7fa36869bc01408966b3b93a88baf1023053a
        exitCode: 1
        finishedAt: "2022-06-23T04:23:40Z"
        message: |+
          time="2022-06-23T04:23:40Z" level=warning msg="\x1b[1;33mDEPRECATION NOTICE:\nSqlite-based catalogs and their related subcommands are deprecated. Support for\nthem will be removed in a future release. Please migrate your catalog workflows\nto the new file-based catalog format.\x1b[0m"
          Error: open ./db-1620022896: permission denied
          Usage:
            opm registry serve [flags]

          Flags:
            -d, --database string          relative path to sqlite db (default "bundles.db")
                --debug                    enable debug logging
            -h, --help                     help for serve
            -p, --port string              port number to serve on (default "50051")
                --skip-migrate             do  not attempt to migrate to the latest db revision when starting
            -t, --termination-log string   path to a container termination log file (default "/dev/termination-log")
                --timeout-seconds string   Timeout in seconds. This flag will be removed later. (default "infinite")

          Global Flags:
                --skip-tls-verify   skip TLS certificate verification for container image registries while pulling bundles
                --use-http          use plain HTTP for container image registries while pulling bundles

        reason: Error
        startedAt: "2022-06-23T04:23:40Z"



Actual results:
The pod is not running

Expected results:
pod of catsrc is running

Additional info:
File-based catalog doesn't has such issue

Comment 4 xzha 2022-06-24 06:56:04 UTC
verify

zhaoxia@xzha-mac test % oc get clusterversion
NAME      VERSION                              AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.11.0-0.nightly-2022-06-24-041539   True        False         20m     Cluster version is 4.11.0-0.nightly-2022-06-24-041539
zhaoxia@xzha-mac test % oc adm release info registry.ci.openshift.org/ocp/release:4.11.0-0.nightly-2022-06-24-041539 --commits|grep operator-lifecycle-manager
  operator-lifecycle-manager                     https://github.com/openshift/operator-framework-olm                         a4147fcb829e6b782b3c78ac69290de7142d5c5d

1, install catsrc
zhaoxia@xzha-mac test % cat catsrc-test.yaml 
apiVersion: operators.coreos.com/v1alpha1
kind: CatalogSource
metadata:
  name: test-index-xzha-1
  namespace: openshift-marketplace
spec:
  displayName: Test
  publisher: OLM-QE
  sourceType: grpc
  image: quay.io/olmqe/ditto-index:test-xzha-1
  updateStrategy:
    registryPoll:
      interval: 10m

oc apply -f catsrc-test.yaml

2, check catsrc status
zhaoxia@xzha-mac test % oc get catsrc test-index-xzha-1 -o yaml
apiVersion: operators.coreos.com/v1alpha1
kind: CatalogSource
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"operators.coreos.com/v1alpha1","kind":"CatalogSource","metadata":{"annotations":{},"name":"test-index-xzha-1","namespace":"openshift-marketplace"},"spec":{"displayName":"Test","image":"quay.io/olmqe/ditto-index:test-xzha-1","publisher":"OLM-QE","sourceType":"grpc","updateStrategy":{"registryPoll":{"interval":"10m"}}}}
  creationTimestamp: "2022-06-24T06:42:06Z"
  generation: 1
  name: test-index-xzha-1
  namespace: openshift-marketplace
  resourceVersion: "33414"
  uid: 54cb00d4-47ce-4b0d-8f7e-8070e658734c
spec:
  displayName: Test
  image: quay.io/olmqe/ditto-index:test-xzha-1
  publisher: OLM-QE
  sourceType: grpc
  updateStrategy:
    registryPoll:
      interval: 10m
status:
  connectionState:
    address: test-index-xzha-1.openshift-marketplace.svc:50051
    lastConnect: "2022-06-24T06:42:32Z"
    lastObservedState: READY
  registryService:
    createdAt: "2022-06-24T06:42:06Z"
    port: "50051"
    protocol: grpc
    serviceName: test-index-xzha-1
    serviceNamespace: openshift-marketplace
zhaoxia@xzha-mac test % oc get pod
NAME                                                              READY   STATUS      RESTARTS   AGE
464e7118966c2ea099f418cbfa6db4996b5a9bfc222cf00ce64bba153frfqlx   0/1     Completed   0          10m
64d5fab169da9e89f0d139e3a61687bd81fdff3d268b1e0152e3e750a5g5952   0/1     Completed   0          10m
certified-operators-dd7bq                                         1/1     Running     0          32m
community-operators-2mxx6                                         1/1     Running     0          32m
marketplace-operator-fb574d489-bg2x7                              1/1     Running     0          38m
qe-app-registry-7rb8g                                             1/1     Running     0          10m
redhat-marketplace-24ppb                                          1/1     Running     0          32m
redhat-operators-h2fsd                                            1/1     Running     0          32m
test-index-xzha-1-5n5g6                                           1/1     Running     0          112s
zhaoxia@xzha-mac test % oc get packagemanifests| grep Test     
ditto-operator                                     Test                   2m16s
zhaoxia@xzha-mac test %

3, install sub using this catsrc
zhaoxia@xzha-mac test % oc new-project test-1
zhaoxia@xzha-mac test % cat og.yaml 
kind: OperatorGroup
apiVersion: operators.coreos.com/v1
metadata:
  name: og-single
  namespace: test-1
spec:
  targetNamespaces:
  - test-1
zhaoxia@xzha-mac test % oc apply -f og.yaml
zhaoxia@xzha-mac test % cat sub_ditto.yaml 
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  name: ditto-operator
  namespace: test-1
spec:
  channel: "alpha"
  installPlanApproval: Automatic
  name: ditto-operator
  source: test-index-xzha-1
  sourceNamespace: openshift-marketplace
zhaoxia@xzha-mac test % oc apply -f sub_ditto.yaml

4, check csv
zhaoxia@xzha-mac test % oc get sub ditto-operator -o=jsonpath='{.status.state}'
AtLatestKnown
zhaoxia@xzha-mac test % oc get csv
NAME                            DISPLAY                            VERSION   REPLACES                PHASE
ditto-operator.v0.2.0           Eclipse Ditto                      0.2.0     ditto-operator.v0.1.1   Succeeded
elasticsearch-operator.v5.5.0   OpenShift Elasticsearch Operator   5.5.0                             Succeeded


LGTM. verified.

Comment 6 errata-xmlrpc 2022-08-10 11:19:11 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Important: OpenShift Container Platform 4.11.0 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2022:5069


Note You need to log in before you can comment on or make changes to this bug.