Libguestfs - Mar 2023 - [libnbd PATCH v4 0/2] lib/utils: introduce async-signal-safe execvpe()

On Wed, Mar 22, 2023 at 12:13:49PM +0100, Laszlo Ersek
wrote:
> On 3/22/23 11:42, Laszlo Ersek wrote:
> 
> > Now the "podman build -f ci/containers/alpine-edge.Dockerfile -t
> > libnbd-alpine-edge" command is failing with a different error
message --
> > the download completes, but the internal relinking etc fails due to
> > permission errors, which I don't understand. I've asked Martin
for comments.
> >
> > Meanwhile, your other email (= just download the prebuilt container
from
> > gitlab) could help!
> 
> Unfortunately, I got the same failure:
> 
> podman run -it --rm --userns=keep-id -v .:/repo:z -w /repo \
>     registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest \
>     bash
> 
> > Trying to pull
registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest...
> > Getting image source signatures
> > Copying blob 88ecf269dec3 done
> > Copying blob 0ded2f83af0e done
> > Copying config a3b4bffb18 done
> > Writing manifest to image destination
> > Storing signatures
> > Error relocating /usr/lib/libreadline.so.8: RELRO protection failed:
Permission denied
> > Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed:
Permission denied
> > Error relocating /usr/lib/libncursesw.so.6: RELRO protection failed:
Permission denied
> > Error relocating /bin/bash: RELRO protection failed: Permission denied
This looks relevant:

  https://bugzilla.redhat.com/show_bug.cgi?id=2019324

and suggests

  restorecon -R ~/.local/share/containers/storage/overlay*

With regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|

On 3/22/23 12:42, Daniel P. Berrang? wrote:
> On Wed, Mar 22, 2023 at 12:13:49PM +0100, Laszlo Ersek wrote:
>> On 3/22/23 11:42, Laszlo Ersek wrote:
>>
>>> Now the "podman build -f ci/containers/alpine-edge.Dockerfile
-t
>>> libnbd-alpine-edge" command is failing with a different error
message --
>>> the download completes, but the internal relinking etc fails due to
>>> permission errors, which I don't understand. I've asked
Martin for comments.
>>>
>>> Meanwhile, your other email (= just download the prebuilt container
from
>>> gitlab) could help!
>>
>> Unfortunately, I got the same failure:
>>
>> podman run -it --rm --userns=keep-id -v .:/repo:z -w /repo \
>>     registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest \
>>     bash
>>
>>> Trying to pull
registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest...
>>> Getting image source signatures
>>> Copying blob 88ecf269dec3 done
>>> Copying blob 0ded2f83af0e done
>>> Copying config a3b4bffb18 done
>>> Writing manifest to image destination
>>> Storing signatures
>>> Error relocating /usr/lib/libreadline.so.8: RELRO protection
failed: Permission denied
>>> Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed:
Permission denied
>>> Error relocating /usr/lib/libncursesw.so.6: RELRO protection
failed: Permission denied
>>> Error relocating /bin/bash: RELRO protection failed: Permission
denied
> 
> This looks relevant:
> 
>   https://bugzilla.redhat.com/show_bug.cgi?id=2019324
> 
> and suggests
> 
>   restorecon -R ~/.local/share/containers/storage/overlay*
Yes, I've tried that (via some other links); it does not help. (In the
first place, I started with a nonexistent ~/.local/share/containers
directory, so I'm unsure why I'm responsible for setting the labels on
new contents... but anyway, I tried it and it does not help.) I'll check
with setenforce 0 next...

Thanks!
Laszlo