12:05 p.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
Bug ID: 1101654
Summary: Permission denied when running Fedora images on Ubuntu
Product: Fedora
Version: 20
Component: docker-io
Assignee: lsm5(a)redhat.com
Reporter: sthorger(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org,
lsm5(a)redhat.com, mattdm(a)redhat.com,
mgoldman(a)redhat.com, s(a)shk.io, vbatts(a)redhat.com
Created attachment 899597
--> https://bugzilla.redhat.com/attachment.cgi?id=899597&action=edit
Example Dockerfile
Description of problem:
Trying to run a basic Docker image from Fedora on Ubuntu 14.04, gives the
following error message:
2014/05/27 17:00:26 exec: "/usr/bin/echo": stat /usr/bin/echo: permission
denied
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce:
1. Build attach Dockerfile
2. Run
Actual results:
2014/05/27 17:00:26 exec: "/usr/bin/echo": stat /usr/bin/echo: permission
denied
Expected results:
Hello world!
Additional info:
Removing "User hello" or "RUN yum -y update" makes it work as
expected
--
You are receiving this mail because:
You are on the CC list for the bug.
3:53 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
Daniel Walsh <dwalsh(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |dwalsh(a)redhat.com
Assignee|lsm5(a)redhat.com |mheon(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
10:31 a.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #1 from Matthew Heon <mheon(a)redhat.com> ---
I'm getting different but possibly related when attempting to reproduce. The
error is now occurring during yum -y upgrade, which is failing for several
packages. It appears that Apparmor is denying read permission on some files -
likely an issue with the Ubuntu docker.io package.
However, I will note that I cannot reproduce the exact error seen here. Running
/usr/bin/echo alone does not error, and errors in yum upgrade prevent running
the two together. Given this, that issue may be entirely unrelated to the
Apparmor denials.
--
You are receiving this mail because:
You are on the CC list for the bug.
12:53 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #2 from sthorger(a)redhat.com ---
I get the same problem now. I believe the errors during yum -y upgrade will be
masking the initial issue I had
--
You are receiving this mail because:
You are on the CC list for the bug.
1:18 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #3 from Matthew Heon <mheon(a)redhat.com> ---
The issues in yum upgrade are not fixed by setting the Apparmor profile for
Docker to permissive mode. The issue seems to shift to the one documented in
https://github.com/dotcloud/docker/issues/5928. In an attempt to fix this, I
built the latest version of Docker including the merged fix on Ubuntu and used
this version, but the new build fails with the same error.
Given this, I'm unable to reproduce your error. I'll look into filing a bug
with the Ubuntu maintainers about this issue, and see if they can put out an
updated package with a fix for the issues with yum upgrade.
If you could find the version of Docker you were using when you originally
encountered the issue, I can also try downgrading to that version and testing
from there.
--
You are receiving this mail because:
You are on the CC list for the bug.
1:58 a.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #4 from sthorger(a)redhat.com ---
I've seen the issue with:
Docker version 0.11.1, build fb99f99
Docker version 0.9.1, build 3600720
--
You are receiving this mail because:
You are on the CC list for the bug.
1:32 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #5 from Daniel Walsh <dwalsh(a)redhat.com> ---
Matt, this looks more like a docker image problem then a docker-io package
problem. Do we have a place to report fedora image problems?
--
You are receiving this mail because:
You are on the CC list for the bug.
8:46 a.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
Daniel Walsh <dwalsh(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |ASSIGNED
Flags| |needinfo?(mattdm(a)redhat.com
| |)
--
You are receiving this mail because:
You are on the CC list for the bug.
12:06 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
Daniel Walsh <dwalsh(a)redhat.com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Assignee|mheon(a)redhat.com |mattdm(a)redhat.com
--
You are receiving this mail because:
You are on the CC list for the bug.
4:48 a.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |lsm5(a)switzerlandmail.ch
Assignee|mattdm(a)redhat.com |lsm5(a)switzerlandmail.ch
Flags|needinfo?(mattdm(a)redhat.com |
|) |
--- Comment #6 from Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> ---
(In reply to Daniel Walsh from comment #5)
Matt, this looks more like a docker image problem then a docker-io
package
problem. Do we have a place to report fedora image problems?
Dan,
There was no good place to report image issues and comments on fedora image
page on docker's index didn't trigger any notifications, so I've been
redirecting people to our BZ for image problems.
Also, I'm assigning this to myself (for now) since the unprefixed images are
generated by docker/stackbrew from my prefixed images.
--
You are receiving this mail because:
You are on the CC list for the bug.
7:15 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #7 from Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> ---
sthorger,
Could you try the image lsm5/fedora:21-test ?
I've removed the systemd and iputils packages from this image (not too sure if
good or bad idea) as those were giving me aforementioned yum update problems on
an ubuntu host.
--
You are receiving this mail because:
You are on the CC list for the bug.
7:16 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #8 from Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> ---
Relevant tail from run:
Step 2 : RUN mkdir /opt/hello
---> Running in 3212d4e00cc3
---> 562cf8ffc657
Step 3 : RUN useradd hello -d /opt/hello
---> Running in 9ee04671effb
useradd: warning: the home directory already exists.
Not copying any file from skel directory into it.
---> ba179069c24e
Step 4 : RUN chown -R hello:hello /opt/hello
---> Running in 3f079fe58813
---> 185d77463f12
Step 5 : USER hello
---> Running in 4b2cc5edfab7
---> a8636cc8f9a1
Step 6 : CMD ["/usr/bin/echo", "Hello world!"]
---> Running in 5c288a08fcd6
---> 2df863fc6c97
Successfully built 2df863fc6c97
Removing intermediate container 386943a43d39
Removing intermediate container 3212d4e00cc3
Removing intermediate container 9ee04671effb
Removing intermediate container 3f079fe58813
Removing intermediate container 4b2cc5edfab7
Removing intermediate container 5c288a08fcd6
--
You are receiving this mail because:
You are on the CC list for the bug.
3:11 a.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #9 from sthorger(a)redhat.com ---
Just tested it out and it works fine here as well
--
You are receiving this mail because:
You are on the CC list for the bug.
5:43 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> changed:
What |Removed |Added
----------------------------------------------------------------------------
See Also| |https://bugzilla.redhat.com
| |/show_bug.cgi?id=1090890
--- Comment #10 from Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> ---
Thanks sthorger.
Question for all: would removing systemd (iputils is probably not too critical)
from the fedora image be a good/bad idea?
This is probably something that needs to go in by end of tomorrow. See Bug
1090890 and https://fedoraproject.org/wiki/Releases/21/Schedule
--
You are receiving this mail because:
You are on the CC list for the bug.
2:35 p.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
--- Comment #11 from Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> ---
Looks like this new image had updated systemd and iputils packages which didn't
complain during the yum update (as against the old ones), as systemd and
iputils still get pulled in during the image creation process, even if I
explicitly set the kickstart script to not pull them in.
--
You are receiving this mail because:
You are on the CC list for the bug.
10:20 a.m.
New subject: [Bug 1101654] Permission denied when running Fedora images on Ubuntu
https://bugzilla.redhat.com/show_bug.cgi?id=1101654
Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |CLOSED
Resolution|--- |CURRENTRELEASE
Last Closed| |2014-07-14 11:20:33
--- Comment #12 from Lokesh Mandvekar <lsm5(a)switzerlandmail.ch> ---
I just updated the 'fedora' image. Also contains the 21 tag.
--
You are receiving this mail because:
You are on the CC list for the bug.
3567
days inactive
3615
days old
golang@lists.fedoraproject.org
15 comments
1 participants
participants (1)
-
Red Hat Bugzilla