Libguestfs - Mar 2023 - [libnbd PATCH v4 0/2] lib/utils: introduce async-signal-safe execvpe()

On 3/22/23 11:42, Laszlo Ersek wrote:
> Now the "podman build -f ci/containers/alpine-edge.Dockerfile -t
> libnbd-alpine-edge" command is failing with a different error message
--
> the download completes, but the internal relinking etc fails due to
> permission errors, which I don't understand. I've asked Martin for
comments.
>
> Meanwhile, your other email (= just download the prebuilt container from
> gitlab) could help!
Unfortunately, I got the same failure:

podman run -it --rm --userns=keep-id -v .:/repo:z -w /repo \
    registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest \
    bash
> Trying to pull registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest...
> Getting image source signatures
> Copying blob 88ecf269dec3 done
> Copying blob 0ded2f83af0e done
> Copying config a3b4bffb18 done
> Writing manifest to image destination
> Storing signatures
> Error relocating /usr/lib/libreadline.so.8: RELRO protection failed:
Permission denied
> Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed:
Permission denied
> Error relocating /usr/lib/libncursesw.so.6: RELRO protection failed:
Permission denied
> Error relocating /bin/bash: RELRO protection failed: Permission denied
I'm doing this as UID 1000 on RHEL-9.1.

Laszlo

On Wed, Mar 22, 2023 at 12:13:49PM +0100, Laszlo Ersek
wrote:
> On 3/22/23 11:42, Laszlo Ersek wrote:
> 
> > Now the "podman build -f ci/containers/alpine-edge.Dockerfile -t
> > libnbd-alpine-edge" command is failing with a different error
message --
> > the download completes, but the internal relinking etc fails due to
> > permission errors, which I don't understand. I've asked Martin
for comments.
> >
> > Meanwhile, your other email (= just download the prebuilt container
from
> > gitlab) could help!
> 
> Unfortunately, I got the same failure:
> 
> podman run -it --rm --userns=keep-id -v .:/repo:z -w /repo \
>     registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest \
>     bash
> 
> > Trying to pull
registry.gitlab.com/nbdkit/libnbd/ci-alpine-edge:latest...
> > Getting image source signatures
> > Copying blob 88ecf269dec3 done
> > Copying blob 0ded2f83af0e done
> > Copying config a3b4bffb18 done
> > Writing manifest to image destination
> > Storing signatures
> > Error relocating /usr/lib/libreadline.so.8: RELRO protection failed:
Permission denied
> > Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed:
Permission denied
> > Error relocating /usr/lib/libncursesw.so.6: RELRO protection failed:
Permission denied
> > Error relocating /bin/bash: RELRO protection failed: Permission denied
This looks relevant:

  https://bugzilla.redhat.com/show_bug.cgi?id=2019324

and suggests

  restorecon -R ~/.local/share/containers/storage/overlay*

With regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|