<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:courier new,monospace">Control: tag -1 moreinfo unreproducible</div><div class="gmail_default" style="font-family:courier new,monospace"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sat, Dec 19, 2020 at 9:15 AM Andreas Maus <<a href="mailto:023a305472eca90cd389e9dd4a9f30f71a6cf4e6@ypbind.de">023a305472eca90cd389e9dd4a9f30f71a6cf4e6@ypbind.de</a>> wrote:</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
After the upgrade of podman to 2.1.1 container images<br>
can't be run if the Dockerfile specify a non-root USER.<br></blockquote><div><br></div><div><div class="gmail_default" style="font-family:"courier new",monospace">I'm sorry, but I can't reproduce this (anymore):</div><div class="gmail_default" style="font-family:"courier new",monospace"><br></div></div></div><blockquote style="margin:0 0 0 40px;border:none;padding:0px"><div class="gmail_quote"><div><font face="monospace">siretart@x1:/tmp/d$ <b><span class="gmail_default" style="font-family:"courier new",monospace"></span>podman rmi -a</b></font></div></div><div class="gmail_quote"><div><font face="monospace">8ac063dba0c0659a071a74e67d3661495215ab740724e416d62f264d73a398ce</font></div></div><div class="gmail_quote"><div><font face="monospace">Untagged: <a href="http://docker.io/library/debian:latest">docker.io/library/debian:latest</a></font></div></div><div class="gmail_quote"><div><font face="monospace">Deleted: db2b7591a39e6b509f93038f6855f95bb783efdc83aa3a20c347453320b6d345</font></div></div><div class="gmail_quote"><div><font face="monospace">Deleted: 6d6b00c22231693c9b87e79986d562874446bf10182206e4621e23ca8dfa8e1c</font></div></div><div class="gmail_quote"><div><font face="monospace">siretart@x1:/tmp/d$ <b><span class="gmail_default" style="font-family:"courier new",monospace"></span>podman rm -a</b></font></div></div><div class="gmail_quote"><div><font face="monospace">siretart@x1:/tmp/d$ <b><span class="gmail_default" style="font-family:"courier new",monospace"></span>cat Dockerfile </b></font></div></div><div class="gmail_quote"><div><font face="monospace"><i><span class="gmail_default" style="font-family:"courier new",monospace"></span>FROM <a href="http://docker.io/debian">docker.io/debian</a></i></font></div></div><div class="gmail_quote"><div><font face="monospace"><i>USER nobody</i></font></div></div><div class="gmail_quote"><div><font face="monospace"><i>RUN id</i></font></div></div><div class="gmail_quote"><div><font face="monospace">siretart@x1:/tmp/d$ <b><span class="gmail_default" style="font-family:"courier new",monospace"></span>podman build -f Dockerfile </b></font></div></div><div class="gmail_quote"><div><font face="monospace">STEP 1: FROM <a href="http://docker.io/debian">docker.io/debian</a></font></div></div><div class="gmail_quote"><div><font face="monospace">Getting image source signatures</font></div></div><div class="gmail_quote"><div><font face="monospace">Copying blob 6c33745f49b4 done </font></div></div><div class="gmail_quote"><div><font face="monospace">Copying config 6d6b00c222 done </font></div></div><div class="gmail_quote"><div><font face="monospace">Writing manifest to image destination</font></div></div><div class="gmail_quote"><div><font face="monospace">Storing signatures</font></div></div><div class="gmail_quote"><div><font face="monospace">STEP 2: USER nobody</font></div></div><div class="gmail_quote"><div><font face="monospace">--> 609dac75d3a</font></div></div><div class="gmail_quote"><div><font face="monospace">STEP 3: RUN id</font></div></div><div class="gmail_quote"><div><font face="monospace">uid=65534(nobody) gid=65534(nogroup) groups=65534(nogroup)</font></div></div><div class="gmail_quote"><div><font face="monospace">STEP 4: COMMIT</font></div></div><div class="gmail_quote"><div><font face="monospace">--> 037e1690447</font></div></div><div class="gmail_quote"><div><font face="monospace">037e1690447f0dd7d90d99cf7bc3cf1206f35f81225f2119445b147d5b6aa3a9</font></div></div></blockquote><div class="gmail_quote"><div><div class="gmail_default" style="font-family:"courier new",monospace"></div></div><div><div class="gmail_default" style="font-family:"courier new",monospace">I was able to reproduce this error with an cached image that I had, but deleting the local one</div><div class="gmail_default" style="font-family:"courier new",monospace">and getting a fresh one from the docker library allowed me to pass that test.</div><div class="gmail_default" style="font-family:"courier new",monospace"><br></div><div class="gmail_default" style="font-family:"courier new",monospace">I was not able to pull your exact image, and to be frank, I'd prefer if you could describe the</div><div class="gmail_default" style="font-family:"courier new",monospace">steps to reproduce this with images that are publicly accessible and simple to reproduce.</div><div class="gmail_default" style="font-family:"courier new",monospace"><br></div><div class="gmail_default" style="font-family:"courier new",monospace">Can you please try again with fresh images and the example that I showed above?<br><br></div></div></div>-- <br><div dir="ltr" class="gmail_signature">regards,<br> Reinhard</div></div>